scudette Goto Github PK

aff4

The Advanced Forensic File Format. NOTE: This project has been split into C and Python projects and moved to https://github.com/aff4/pyaff4 and https://github.com/Velocidex/c-aff4

aff4-snappy

Python bindings for the snappy google library

amc

Apache Media Center

archiver

artifacts

ForensicArtifacts.com Artifact Repository

assert

A simple assertion library using Go generics

audit

Collection of Audit and Compliance related VQL artifacts

awesome-incident-response

A curated list of tools for incident response

blackfriday

Blackfriday: a markdown processor for Go

c-aff4

An AFF4 C++ implementation.

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

cb-response-surveyor

A simple survey tool for Cb Response

cloud_storage

Some scripts to make working with cloud storage easier.

detectionrules

dfirartifactmuseum

The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifacts that may no longer be readily available anymore.

dfrwseu-2015

Characterization of the Windows Kernel version variability for accurate Memory analysis.

efilter

This is an EFilter package with Rekall specific modifications

eql

eqllib

etw

Go library for ETW (Event Tracing for Windows) events processing

etw-providers-docs

Document ETW providers

evtx

Golang Parser for Microsoft Event Logs

evtx-attack-samples

Windows Events Samples

extensible-storage-engine

fb-util-for-appx

Create .appx files.

ghidra

Ghidra is a software reverse engineering (SRE) framework

go-ese

Go implementation of an Extensible Storage Engine parser

go-libaudit

go-libaudit is a library for communicating with the Linux Audit Framework.

go-pointer

gopsutil

psutil for golang