stuxnet999 / EventTranscriptParser
Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
☆68Updated last year
Alternatives and similar repositories for EventTranscriptParser:
Users that are interested in EventTranscriptParser are comparing it to the libraries listed below
- ☆21Updated 3 months ago
- macOS Artifacts☆29Updated 2 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆53Updated last year
- Quick ESXi Log Parser☆19Updated 3 months ago
- Contains compiled binaries of Volatility☆33Updated 3 months ago
- A high-speed forensic processing engine purpose-built for DFIR investigators. Quickly consolidate CSV output from processed triage eviden…☆44Updated this week
- Parses USB connection artifacts from offline Registry hives☆97Updated 2 months ago
- USN Journal full path builder☆59Updated 7 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆13Updated 2 months ago
- Linux Baseline and Forensic Triage Tool - BETA☆55Updated 2 years ago
- Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!☆45Updated 7 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆84Updated 2 months ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆70Updated last year
- Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite☆17Updated 2 years ago
- Initial triage of Windows Event logs☆97Updated 10 months ago
- An exercise to practice deobfuscating PowerShell Scripts.☆28Updated 2 years ago
- A simple script to read the contents of a zip/tar/folder and extract metadata☆19Updated 2 weeks ago
- RegRipper4.0☆47Updated this week
- ☆21Updated 2 years ago
- Detection rule validation☆41Updated last year
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆95Updated last year
- A tool for fetching DFIR and other GitHub tools.☆23Updated this week
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 5 months ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆33Updated this week
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆55Updated 3 months ago
- Logbook for Digital Forensics and Incident Response☆50Updated 9 months ago
- CarbonBlack EDR detection rules and response actions☆71Updated 7 months ago
- Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.☆38Updated 6 months ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆23Updated last week
- A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.☆94Updated 2 years ago