Alternatives and similar repositories for usb_investigator:

Users that are interested in usb_investigator are comparing it to the libraries listed below

• mgeeky / LISET
  Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident re…
  ☆29Updated 8 years ago
• kirk-sayre-work / xlmulator
  Python emulator for Excel XLM macros.
  ☆18Updated 4 years ago
• 2igosha / sunburst_dga
  ☆22Updated 4 years ago
• Silv3rHorn / autoripy
  Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
  ☆13Updated 9 months ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆16Updated last year
• dtmsecurity / 3aj-lib
  Proof of concept communications from C# via a web browser process
  ☆21Updated 6 years ago
• WMSR / utils
  ☆11Updated 4 years ago
• markgamache / GPOwn
  Do the unexpected with AD GPO processing
  ☆9Updated 6 years ago
• woanware / volatility-runner
  volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for insta…
  ☆11Updated 6 years ago
• Hestat / intel-sharing
  Repository of Information sharing on threats and indicators
  ☆12Updated 5 years ago
• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆15Updated 5 years ago
• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 5 years ago
• mauronz / binja-emotet
  ☆18Updated 4 years ago
• proferosec / Threat-Intelligence
  A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.
  ☆10Updated 5 years ago
• Rurik / Java_IDX_Parser
  Parses Java Cache IDX files
  ☆39Updated 7 years ago
• jfmaes / Parsers
  parsers to make life easier
  ☆13Updated 4 years ago
• SentineLabs / PowerTrick
  This is a repository for the public blog with Labs indicators of compromise and code
  ☆18Updated 5 years ago
• evild3ad / isodump
  isodump - ISO dump utility
  ☆40Updated 5 years ago
• aaronst / talks
  Presentation materials for talks I've given.
  ☆20Updated 5 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 8 years ago
• analyzeDFIR / analyzePF
  Tool for analysis of Windows Prefetch files
  ☆26Updated 6 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• ahhh / presentations
  various slides and presentations I've worked on
  ☆18Updated last month
• re-fox / documentation
  ☆13Updated 4 years ago
• rvrsh3ll / CrypoCurrencyPowerShell
  ☆30Updated 6 years ago
• ruppde / yara_rules
  Yara rules
  ☆21Updated 2 years ago
• PwnDexter / FindFrontableDomains
  Forked and updated with some additional features over the original
  ☆17Updated 4 years ago
• dfirlabs / ntfs-specimens
  NTFS file system specimens
  ☆13Updated last year
• caschnee / misp-use-cases
  ☆14Updated 6 years ago
• blacklotuslabs / Research
  The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.
  ☆12Updated 3 years ago