Projects with this topic
-
Ferramenta de perícia digital para Windows: 119 módulos leem Prefetch, Amcache, BAM, journal do NTFS e logs de aplicação para identificar programas já executados, mesmo depois de apagados. Cruza indícios de fontes diferentes e entrega um veredito com percentual de confiança. Roda inteiramente local, sem enviar dado nenhum. Python, MIT.
Updated -
Deploy a clean, debloated version of Windows 10/11 with a baseline of digital forensic tools
Updated -
C++ UserAssist registry decoder for Windows forensic analysis
Updated -
C++ Windows token privilege forensic analyzer for escalation detection
Updated -
C++ Windows Task Scheduler forensic analyzer for persistence detection
Updated -
C++ super timeline builder for digital forensics investigation
Updated -
C++ ShimCache (AppCompatCache) parser for execution artifact forensics
Updated -
C++ Windows registry transaction log parser for forensic analysis
Updated -
C++ Windows Recycle Bin forensic parser for deleted file recovery
Updated -
C++ Windows Prefetch file parser for program execution forensics
Updated -
C++ NTFS parser for file system change forensics
Updated -
C++ volatile memory artifact extractor for incident response
Updated -
C++ Windows BAM/DAM forensic analysis tool for execution evidence
Updated -
C++ Amcache forensic parser for Windows program execution artifacts
Updated -
Forensic project aiming to visualize data extracted from Plaso, Evtxtract, Volatility with a graph approach.
Updated
