vertrex / DFF
DFF (Digital Forensics Framework)
☆10Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for DFF
- ☆22Updated 3 years ago
- The Multiplatform Linux Sandbox☆15Updated 10 months ago
- Yara rules☆19Updated last year
- ☆24Updated 2 years ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 3 years ago
- Plugins for the Viper Framework☆14Updated 5 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆13Updated 8 months ago
- Repository for scripts and tips for "Yara Scan Service"☆20Updated last year
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 5 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆21Updated last year
- ☆17Updated 2 months ago
- ☆12Updated 3 years ago
- Python emulator for Excel XLM macros.☆18Updated 4 years ago
- Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident re…☆27Updated 8 years ago
- Basic file metadata gathering script☆21Updated 2 years ago
- D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit☆29Updated this week
- Carving tool based in Radare2 & Yara☆15Updated 6 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆22Updated 9 months ago
- Threat hunting with EQL and Bro. This repo contains modifications to EQL and EQLLib to use BRO logs.☆8Updated 5 years ago
- Forensics triage tool relying on Volatility and Foremost☆24Updated 11 months ago
- FastIR Agent is a Windows service to execute FastIR Collector on demand☆14Updated 7 years ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- Yara filetype plugin for Vim.☆14Updated 3 years ago
- Imphash-like calculation on Golang binaries☆47Updated 2 years ago
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Updated 4 years ago
- Autopsy Module to analyze Registry Hives☆13Updated 2 years ago