msuiche / dinfo

Related projects ⓘ

Alternatives and complementary repositories for dinfo

• jeperez / windows-operating-system-archaeology
  windows-operating-system-archaeology @Enigma0x3 @subTee
  ☆44Updated 7 years ago
• cyb3rfox / MFTEntryCarver
  Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…
  ☆21Updated 5 years ago
• StrangerealIntel / DeltaFlare
  ☆12Updated 3 years ago
• SecurityRiskAdvisors / PDBlaster
  ☆48Updated 4 years ago
• JR0driguezB / malware_analysis
  Various snippets created during malware analysis
  ☆22Updated 6 years ago
• bonifield / volatilityGrapher
  Force-Directed Graph Generator for Volatility Ouputs
  ☆26Updated 5 years ago
• davebremer / Export-SysmonLogs
  ☆11Updated 6 years ago
• RealityNet / McAFuse
  Toolset to analyze disks encrypted with McAFee FDE technology
  ☆17Updated 3 years ago
• airbus-cert / PSTrace
  Trace ScriptBlock execution for powershell v2
  ☆39Updated 4 years ago
• l0ss / Get-GPTrashfire
  B-Sides CBR 2018 talk about group policy and Grouper
  ☆39Updated 5 years ago
• MotiBa / ProcessMonitorAnalyzeMalware
  Script to parse Process Monitor XML log file, and give you a summary report.
  ☆23Updated 8 years ago
• GDATAAdvancedAnalytics / winreg-tasks
  ☆14Updated 2 years ago
• sisoc-tokyo / mimikatz_detection
  ☆12Updated 6 years ago
• mgeeky / LISET
  Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident re…
  ☆27Updated 8 years ago
• woanware / reg-entropy-scanner
  Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…
  ☆11Updated 5 years ago
• nccgroup / yaml2yara
  Generate bulk YARA rules from YAML input
  ☆22Updated 4 years ago
• itsreallynick / office-crackros
  Crack your macros like the math pros.
  ☆33Updated 7 years ago
• defendthehoneypot / DomainController-GPOs
  Domain Controller GPOs
  ☆20Updated 7 years ago
• ohjeongwook / WindowsEventTools
  Collection Of Scripts And Utilities For Windows Event Hunting
  ☆16Updated 4 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 8 years ago
• mattifestation / WindowsEventLogMetadata
  Event metadata collected across all manifest-based ETW providers on Window 10 1903
  ☆30Updated 4 years ago
• Invoke-IR / WmiEvent
  A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions
  ☆54Updated 8 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 7 years ago
• Invoke-IR / PowerForensicsPortable
  ☆31Updated 4 years ago
• secgroundzero / ossem_modular
  OSSEM Modular
  ☆27Updated 4 years ago
• Rurik / Java_IDX_Parser
  Parses Java Cache IDX files
  ☆39Updated 6 years ago