sdckey / EnScript-Samples
This repository is a collection of EnScript code samples for use in the OpenText EnCase application.
☆53Updated 3 weeks ago
Alternatives and similar repositories for EnScript-Samples:
Users that are interested in EnScript-Samples are comparing it to the libraries listed below
- General repository for compiled and uncompiled EnCase EnScripts☆46Updated 4 years ago
- Example programs used in the automating DFIR series☆63Updated 6 years ago
- Different DFIR and CTI utilities☆36Updated 4 years ago
- Tools from WFA 4/e, timeline tools, etc.☆136Updated last year
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- Personal settings for X-Ways Forensics☆31Updated 3 years ago
- PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.☆50Updated 7 years ago
- "Evolving AppCompat/AmCache data analysis beyond grep"☆203Updated 3 years ago
- This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, dire…☆54Updated 5 years ago
- Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.☆66Updated 4 years ago
- Dump of organized knowledge on DFIR☆134Updated 3 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 5 years ago
- Yet another registry parser☆132Updated 3 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Volatility plugins created by the author☆44Updated 9 years ago
- An advanced parser for INDX records☆27Updated 5 years ago
- Invoke-LiveResponse☆147Updated 3 years ago
- Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files☆117Updated 11 months ago
- Repository of scripts/tools that may be useful in Security Operations Centres (SOC)☆54Updated 4 years ago
- Salt States for Configuring the SIFT Workstation☆102Updated this week
- Scripts to facilitate filtering with Plaso☆126Updated 4 years ago
- ☆39Updated 5 years ago
- Volatility plugins developed and maintained by the community☆21Updated 7 months ago
- Splunk Boss of the SOC v1 data set.☆111Updated 6 years ago
- CB API scripts for IR, administration, etc.☆32Updated 5 years ago
- Cuckoo Sandbox is an automated dynamic malware analysis system☆107Updated 4 years ago
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Updated 5 years ago
- Office365 Log Analysis Framework☆82Updated 5 years ago
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆55Updated last week
- Analyze binaries collected in VMware Carbon Black EDR against Yara rules.☆37Updated 2 years ago