woanware / JumpListerLinks
☆18Updated 12 years ago
Alternatives and similar repositories for JumpLister
Users that are interested in JumpLister are comparing it to the libraries listed below
Sorting:
- A GC link parser for both linkfiles and jumplists.☆18Updated 8 years ago
- Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing☆55Updated 6 years ago
- An updated C# port of X-Ways X-Tensions API.☆12Updated 7 years ago
- Extract compressed memory pages from page-aligned data☆45Updated 6 years ago
- Decode security descriptors in $Secure on NTFS☆20Updated 3 years ago
- Binaries for the log2timeline projects and dependencies☆39Updated 8 months ago
- Force-Directed Graph Generator for Volatility Ouputs☆26Updated 6 years ago
- Tool for analysis of Windows Prefetch files☆26Updated 6 years ago
- Various DFIR Tools☆26Updated 6 years ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- Parses the WMI object database....looking for persistence☆32Updated 5 years ago
- Windows link file (shortcuts) examiner☆68Updated 11 months ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year
- Forensic Scanner☆41Updated 12 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆31Updated 4 years ago
- radare2 script to help on COM objects reverse engineering☆11Updated 8 years ago
- ☆47Updated 5 years ago
- Carve Windows Prefetch files from arbitrary binary data☆14Updated 7 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- Capture-Py is a malware analysis tool that makes a copy of any files deleted or modified in a given directory and sub-directories. It was…☆23Updated 7 years ago
- Windows registry samples☆23Updated 6 years ago
- TA505 unpacker Python 2.7☆47Updated 4 years ago
- Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process E…☆36Updated 8 years ago
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆41Updated 6 years ago
- A Maltego transform for VirusTotal Submitter Information☆35Updated 6 years ago
- misc scripts☆36Updated 6 years ago
- Volatility memory forensics plugin for extracting Windows DNS Cache☆29Updated 8 years ago
- LNK to JSON☆14Updated 6 years ago