mdegrazia / KAPE_ToolsLinks
Tools and Binaries to use with KAPE
☆12Updated 6 years ago
Alternatives and similar repositories for KAPE_Tools
Users that are interested in KAPE_Tools are comparing it to the libraries listed below
Sorting:
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- ☆36Updated 2 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 8 months ago
- OSSEM Modular☆27Updated 5 years ago
- Manipulate timestamps on NTFS☆52Updated 10 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Updated 2 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆42Updated 4 years ago
- Miscellaneous Scripts☆17Updated 5 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 5 years ago
- Mass Triage Tools☆20Updated last week
- Tools for parsing Forensic images☆41Updated 6 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Hunt malware with Volatility☆47Updated 3 months ago
- Generate YARA rules for OOXML documents.☆38Updated 2 years ago
- Yara rules☆22Updated 2 years ago
- Threat Box Assessment Tool☆19Updated 4 years ago
- A set of tools for collecting forensic information☆26Updated 5 years ago
- Presentation materials for talks I've given.☆20Updated 6 years ago
- Random hunting ordiented yara rules☆97Updated 2 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 9 years ago
- Python based CLI for MalwareBazaar☆38Updated 3 months ago
- Collection of scripts used to analyse malware or emails☆20Updated 5 years ago
- Userland API monitor for threat hunting☆58Updated 5 years ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated 2 weeks ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 6 years ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆41Updated 2 years ago
- Site for IWS book content☆17Updated 6 years ago
- A collection of Indicators of Compromise (IoCs), most aligning with samples derived from the signatures in the YARA-Signatures repo☆30Updated 5 years ago
- isodump - ISO dump utility☆41Updated 6 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago