omerbenamram / pyevtx-rs

Related projects: ⓘ

• 3c7 / yaramanager
  Simple yara rule manager
  ☆64Updated last year
• msuhanov / yarp
  Yet another registry parser
  ☆128Updated 2 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 3 years ago
• ANSSI-FR / bits_parser
  Extract BITS jobs from QMGR queue and store them as CSV records
  ☆73Updated 2 months ago
• pcbje / pyad1
  Python library for parsing AccessData AD1 images
  ☆29Updated last year
• Beercow / SEPparser
  Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.
  ☆62Updated last year
• CybercentreCanada / CCCS-Yara
  YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA
  ☆93Updated 2 weeks ago
• brimorlabs / KStrike
  Stand-alone parser for User Access Logging from Server 2012 and newer systems
  ☆71Updated 8 months ago
• forensicanalysis / artifacts
  📇 Digital Forensics Artifact Repository (forensicanalysis edition)
  ☆71Updated 7 months ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆33Updated last month
• 00010111 / smbtimeline
  ☆28Updated last year
• EricZimmerman / RECmd
  Command line access to the Registry
  ☆123Updated 2 weeks ago
• AndrewRathbun / EventTranscript.db-Research
  A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.
  ☆38Updated 2 years ago
• forensicmatt / libtsk-rs
  Wrapper for TSK (Sleuth Kit) Bindings
  ☆11Updated last year
• theflakes / fmd
  Windows file metadata / forensic tool.
  ☆14Updated this week
• Velocidex / evtx-data
  Publicly shareable windows event log message data
  ☆27Updated 4 years ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆93Updated 9 months ago
• strozfriedberg / notatin
  A Windows registry file parser written in Rust
  ☆35Updated last year
• omerbenamram / pymft-rs
  Python bindings for https://github.com/omerbenamram/mft
  ☆18Updated last year
• CERT-Polska / training-mwdb
  MWDB exercises
  ☆19Updated 3 months ago
• hvs-consulting / ioc_signatures
  Repository with selected IOCs and YARA rules for threat hunting.
  ☆31Updated 3 weeks ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆95Updated last year
• avast / yarang
  Alternative YARA scanning engine
  ☆66Updated 2 years ago
• harelsegev / INDXRipper
  Carve file metadata from NTFS index ($I30) attributes
  ☆58Updated 7 months ago
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆71Updated 4 months ago
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆75Updated 2 weeks ago
• fireeye / HXTool
  HXTool is an extended user interface for the FireEye HX Endpoint product. HXTool can be installed on a dedicated server or on your physic…
  ☆79Updated 2 months ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆82Updated 3 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆145Updated 2 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆66Updated 10 months ago