beercow Goto Github PK

malware

Course materials for Malware Analysis by RPISEC

malware-crawler

Automatically exported from code.google.com/p/malware-crawler

manuf

Parser library for Wireshark's OUI database.

misc-scripts

misc scripts

nbdserver

Network Block Device Server for windows with a DFIR/forensic focus.

npp-smtp-language

Syntax highlighting for email files

onedriveexplorer

OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat and <UserCid>.dat.previous file.

peframe

PEframe is a open source tool to perform static analysis on (portable executable) malware.

phishingkittracker

Tracking Threat Actor Emails in Phishing Kits. CC @neonprimetime on twitter if you find a #threatactoremail in #phishingkit

pinn

An enhanced Operating System installer for the Raspberry Pi

plaso_filters

Scripts to facilitate filtering with Plaso

powershell

Container for powershell scripts

procdot-plugins

Plugins to add funtionality to ProcDOT. http://www.procdot.com

productivity-tools

Tools I created for myself: OneNote to Markdown Converter, HTML Obfuscator, Simple RegEx and more...

pylnker

This is a Python port of lnk-parse-1.0, a tool to parse Windows .lnk files.

pypykatz

Mimikatz implementation in pure Python

pysddl

Automatically exported from code.google.com/p/pysddl

pystemon

Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon

qemu

qemu with Raspberry Pi 2 and Windows on ARM support

qemu-rpi-kernel

Qemu kernel for emulating Rpi on QEMU

quarantine-formats

Documentation and parsers for different anti-virus quarantine formats.

redline-process-tree-report

Graphical representation of processes from Redline

rtl8188-hostapd

hostapd for Realtek RTL8188

sepparser

Script for parsing Symantec Endpoint Protection logs, VBNs, and ccSubSDK database.

shimcacheparser

surge-collect

Script for deploying surge-collect on Windows

sysinternals

Content for sysinternals.com

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

sysmon-queries

Queries to parse sysmon event log file with microsoft logparser

tcpflow

TCP/IP packet demultiplexer