tokesr / usb_investigator
☆9Updated 5 years ago
Alternatives and similar repositories for usb_investigator:
Users that are interested in usb_investigator are comparing it to the libraries listed below
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated 10 months ago
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 6 years ago
- ☆22Updated 4 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- NTFS file system specimens☆14Updated last year
- isodump - ISO dump utility☆39Updated 5 years ago
- Tool for analysis of Windows Prefetch files☆26Updated 6 years ago
- Windows 10 Live Information viewer☆35Updated 2 years ago
- volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for insta…☆11Updated 5 years ago
- This is a repository for the public blog with Labs indicators of compromise.☆10Updated 5 years ago
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆13Updated 5 months ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- Parser for Sdba memory pool tags☆17Updated 3 years ago
- Git for me to put all my forensics stuff☆21Updated this week
- Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident re…☆27Updated 8 years ago
- ☆12Updated 3 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- Python emulator for Excel XLM macros.☆18Updated 4 years ago
- Parses Java Cache IDX files☆39Updated 6 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- ☆23Updated last year
- Repository of Information sharing on threats and indicators☆12Updated 4 years ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆12Updated 3 years ago
- A set of tools for collecting forensic information☆26Updated 4 years ago
- Just Another broken Registry Parser (JARP)☆16Updated 7 months ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Updated 3 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 5 years ago
- DeployREMnux is a Python script that will deploy a cloud instance of the public REMnux distribution in the Amazon cloud (AWS).☆16Updated 5 years ago