jameshabben Goto Github PK

4n6-app-finder

Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.

aleapp

Android Logs Events And Protobuf Parser

bstrings

A better strings utility!

ccm-rua-enscript

EnScript to find and parse CCM_RecentlyUsedApps records

clogfirefoxparser

Use this python script to parse the log file for KeyUp or KeyDown events and print the characters that were typed

community

Volatility plugins developed and maintained by the community

encasenetworkframework

This is a framework written in EnScript to utilize the network capabilities of EnCase. The purpose is to allow for someone to build a quick network enabled EnScript to respond quickly to threats with minimal code being written.

evolve

Web interface for the Volatility Memory Forensics Framework

firefoxcache2

Python scripts for parsing the index file and individual cache files from the cache2 folder of Firefox defaulted on in version 32

flare-wmi

flightsim

A utility to generate malicious network traffic and evaluate controls

helpfulpython

Various Python scripts that are helpful for me

ileapp

iOS Logs, Events, And Plist Parser

kaitai_struct_formats

Kaitai Struct: library of binary file formats (.ksy)

malwarestuff

mbr-scan

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

powerforensics

PowerShell - Live disk forensics platform

recteq

Control & Monitor your Recteq Grill

registry

Full featured, offline Registry parser in C#

regripper2.8

RegRipper version 2.8

rleapp

Returns Logs Events And Properties Parser

sovolstuff

This repository hosts a collection of enhancements, fixes, and customizations for Sovol 3D printers, addressing various issues and extending functionality.

sysmon-queries

Queries to parse sysmon event log file with microsoft logparser

uproot

vleapp

Vehicle Logs Events And Properties Parser

volatility

An advanced memory forensics framework

windows-prefetch-parser

Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files