mandiant/win10_auto external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mandiant/win10_auto

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mandiant/win10_auto)

Close

mandiant / win10_autoView on GitHubMore

• External links
• Readme badge

☆24Aug 30, 2019Updated 6 years ago

Alternatives and similar repositories for win10_auto

Users that are interested in win10_auto are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• mandiant / win10_rekall

  View on GitHub
  Rekall Memory Forensic Framework
  ☆33Aug 5, 2019Updated 6 years ago
• elastic / sans-dfir-2022

  View on GitHub
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Feb 6, 2025Updated last year
• theaj42 / presentations

  View on GitHub
  ☆17Jan 21, 2026Updated 2 months ago
• mandiant / DFUR-Splunk-App

  View on GitHub
  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
  ☆13Sep 9, 2020Updated 5 years ago
• manta0101 / Incident-Recorder

  View on GitHub
  Rolling Timeline for Incident Recorder.
  ☆14Dec 4, 2023Updated 2 years ago
• wanttobeno / Detours_4.0.1

  View on GitHub
  MircoSoft Detours 4.0.1，MIT License，Support X86，X64，ARM，IA64
  ☆12Apr 23, 2018Updated 7 years ago
• DragonQuestHero / CSKZ-AutoBhopJump

  View on GitHub
  请叫我跳跳虎
  ☆33Dec 21, 2020Updated 5 years ago
• Powershell-Offense / Post-Exploitation

  View on GitHub
  \ PowerAvails Powershell /
  ☆10Jun 30, 2018Updated 7 years ago
• binjo / ghidra_scripts

  View on GitHub
  ghidra scripts
  ☆15Feb 5, 2021Updated 5 years ago
• svch0stz / velociraptor-detections

  View on GitHub
  ☆22Jan 31, 2023Updated 3 years ago
• cado-security / AWS_EKS_Cluster_Forensics

  View on GitHub
  AWS EKS Cluster Forensics
  ☆23Aug 16, 2021Updated 4 years ago
• 0xd0cf11e / ghidra

  View on GitHub
  Anything related to Ghidra
  ☆12Apr 22, 2019Updated 6 years ago
• 2xic-archive / Reverse-engineering-tool

  View on GitHub
  Binary analysis. Capstone+Keystone+Unicorn = static and dynamic binary analysis
  ☆12Oct 11, 2019Updated 6 years ago
• mandiant / vbScript_deobfuscator

  View on GitHub
  Help deobfuscate VBScript
  ☆18Jul 1, 2022Updated 3 years ago
• brimorlabs / KStrike

  View on GitHub
  Stand-alone parser for User Access Logging from Server 2012 and newer systems
  ☆79Jan 9, 2024Updated 2 years ago
• james-tate / Ghidra-Unicorn-Emulator

  View on GitHub
  A debugger / emulator for Ghidra
  ☆14Oct 30, 2019Updated 6 years ago
• dwmetz / Axiom-PowerShell

  View on GitHub
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆12Aug 26, 2024Updated last year
• ga1ois / Recon-2018-Montreal

  View on GitHub
  ☆22Jul 6, 2018Updated 7 years ago
• FrenchYeti / frida-systruct

  View on GitHub
  The future home for a library able to parse in memory lot of complex structures from common shared libs and syscalls
  ☆15Apr 4, 2023Updated 2 years ago
• brokensound77 / toruk

  View on GitHub
  Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data
  ☆13Jul 16, 2019Updated 6 years ago
• mandiant / ARDvark

  View on GitHub
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆36Jun 1, 2023Updated 2 years ago
• mrexodia / regstep

  View on GitHub
  Simple x64dbg plugin to show registers on every step.
  ☆16Jul 27, 2019Updated 6 years ago
• keydet89 / LNK

  View on GitHub
  Repository for LNK stuff
  ☆31Aug 31, 2022Updated 3 years ago
• obsidianforensics / SQUID

  View on GitHub
  "Fuzzy matching" for SQLite databases
  ☆30Jun 30, 2020Updated 5 years ago
• SouhailHammou / Exploits

  View on GitHub
  Exploits I've authored
  ☆60Aug 13, 2019Updated 6 years ago
• mandiant / pulsesecure_exploitation_countermeasures

  View on GitHub
  ☆23Jun 1, 2023Updated 2 years ago
• dwmetz / PSHero

  View on GitHub
  PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
  ☆37Jul 11, 2023Updated 2 years ago
• strozfriedberg / QELP

  View on GitHub
  Quick ESXi Log Parser
  ☆30Oct 20, 2025Updated 5 months ago
• forensicmatt / RustyReg

  View on GitHub
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Dec 28, 2021Updated 4 years ago
• forensicmatt / libtsk-rs

  View on GitHub
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆12Jan 10, 2023Updated 3 years ago
• mandiant / rvmi-kvm

  View on GitHub
  Linux-KVM with rVMI extensions
  ☆22Aug 28, 2017Updated 8 years ago
• strozfriedberg / llama

  View on GitHub
  llama is lightgrep's amazing media analyzer
  ☆16Oct 28, 2025Updated 4 months ago
• goretk / pygore

  View on GitHub
  pyGoRE - Python library for analyzing Go binaries
  ☆66Feb 12, 2022Updated 4 years ago
• stonedreamforest / kar98k_public

  View on GitHub
  pwn & ctf tools for windows
  ☆25Jun 21, 2020Updated 5 years ago
• taviso / iknowthis

  View on GitHub
  iknowthis Linux SystemCall Fuzzer
  ☆20Apr 18, 2019Updated 6 years ago
• omerbenamram / winstructs

  View on GitHub
  Parsers for common structures across windows formats.
  ☆12Aug 23, 2023Updated 2 years ago
• lfrazer / class--

  View on GitHub
  Convert C++ classes to plain C structs for use with IDA / ghidra local types
  ☆16Jan 3, 2021Updated 5 years ago
• Recruit-CSIRT / macApfsMounter

  View on GitHub
  A small tool to easily mount APFS image on macOS for forensics.
  ☆16Jul 30, 2020Updated 5 years ago
• kev365 / OSDFIR-Lab

  View on GitHub
  ☆22Nov 22, 2025Updated 4 months ago