mdegrazia / KAPE_ToolsLinks
Tools and Binaries to use with KAPE
☆12Updated 6 years ago
Alternatives and similar repositories for KAPE_Tools
Users that are interested in KAPE_Tools are comparing it to the libraries listed below
Sorting:
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 5 years ago
- ☆36Updated 2 years ago
- Tools for parsing Forensic images☆41Updated 6 years ago
- Mass Triage Tools☆20Updated 7 months ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆42Updated 4 years ago
- Manipulate timestamps on NTFS☆52Updated 10 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 7 months ago
- Yara rules☆22Updated 2 years ago
- Generate YARA rules for OOXML documents.☆38Updated 2 years ago
- Miscellaneous Scripts☆17Updated 5 years ago
- isodump - ISO dump utility☆41Updated 6 years ago
- LNK to JSON☆14Updated 6 years ago
- Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.☆65Updated 2 years ago
- Threat Box Assessment Tool☆19Updated 4 years ago
- A library for fast parse & import of Windows Eventlogs into Elasticsearch.☆85Updated 3 months ago
- A list of IOCs applicable to PoshC2☆24Updated 5 years ago
- ☆33Updated 10 months ago
- Git for me to put all my forensics stuff☆23Updated last month
- OSSEM Modular☆27Updated 5 years ago
- Userland API monitor for threat hunting☆58Updated 5 years ago
- Binary commandline executable to parse ETL files☆68Updated 7 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆29Updated 4 years ago
- Parser for Sdba memory pool tags☆20Updated 4 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago
- Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…☆22Updated 6 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆23Updated 4 years ago
- Collection of YARA signatures from individual research☆44Updated last year
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆41Updated 2 years ago