thimbleweed / All-In-USBLinks
☆152Updated 11 years ago
Alternatives and similar repositories for All-In-USB
Users that are interested in All-In-USB are comparing it to the libraries listed below
Sorting:
- RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.☆301Updated 2 years ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆251Updated last month
- Parses amcache.hve files, but with a twist!☆144Updated 11 months ago
- MAL-CL (Malicious Command-Line)☆320Updated 2 years ago
- Incident Response collection and processing scripts with automated reporting scripts☆316Updated last year
- Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.☆206Updated last week
- RegRipper3.0☆667Updated last year
- Digital forensic acquisition tool for Windows based incident response.☆346Updated last year
- ☆89Updated this week
- Ransomware simulator written in Golang☆459Updated 3 years ago
- Live forensic artifacts collector☆173Updated last year
- Blue Team detection lab created with Terraform and Ansible in Azure.☆171Updated last year
- Run several volatility plugins at the same time☆115Updated 3 years ago
- Prefetch Explorer Command Line☆275Updated 11 months ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆339Updated last week
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆305Updated 4 years ago
- Initial triage of Windows Event logs☆104Updated last year
- Parses $MFT from NTFS file systems☆281Updated 7 months ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆170Updated 3 years ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆106Updated 3 years ago
- ☆195Updated last year
- Incident Response - Fast suspicious file finder☆247Updated 3 years ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆156Updated 4 years ago
- C# based evtx parser with lots of extras☆337Updated 3 months ago
- Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…☆271Updated 2 years ago
- Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…☆310Updated 4 years ago
- Linux Evidence Acquisition Framework☆117Updated last year
- Lnk Explorer Command line edition!!☆331Updated 11 months ago
- This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …☆207Updated 5 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆225Updated 4 years ago