AbdulRhman Alfaifi's Projects
A python script to extract comment from any webpage.
CryptnetURLCacheParser is a tool to parse CryptAPI cache files
A rust parser for CryptnetURLCache metadata files.
cve-2020-0688
EventLogMonitor hooks into Window Event Logs and display the new event as they written to the log.
Artifact collection tool for *nix systems
A python script that takes a path as input then go recursively looking for office file that contains macros.
Digital Forensics Investigation Platform
Wrapper for TSK (Sleuth Kit) Bindings
lnk_parser is a full rust implementation to parse windows LNK files
Loki - Simple IOC and Incident Response Scanner
Command line tool to encode message to morse code and decode morse code to clear message.
This crate allows you to execute osquery SQL queries using osquery Thrift API
osqueryIR is an artifact collection tool for Linux systems.
Python bindings for https://github.com/omerbenamram/evtx/
Parser for Recycle Bin $I files
Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs
NTFS Security Descriptor Stream ($Secure:$SDS) parser, Python bindings for https://github.com/AbdulRhmanAlfaifi/SDSParser-rs
NTFS Security Descriptor Stream ($Secure:$SDS) parser
Concise, consistent, and legible badges in SVG and raster format
collection of structs and utilities for parsing windows binary formats.
Parsers for common structures across windows formats.