Pinned Loading

1. dissect-acquire dissect-acquire Public

   Compiled Windows binary of acquire from Fox-IT dissect project

   1

2. EventLogs-LogonLogoff.tkape EventLogs-LogonLogoff.tkape Public

   KAPE Target for Logon-Logoff Windows events

3. Get-LateralMovement Get-LateralMovement Public

   This script will accept the mounted drive or full path to an evidence source and process relevant forensic artifacts for evidence of lateral movement.

   PowerShell

4. KapeFiles KapeFiles Public

   Forked from EricZimmerman/KapeFiles

   This repository serves as a place for community created Targets and Modules for use with KAPE.

5. WMI_Forensics WMI_Forensics Public

   Forked from davidpany/WMI_Forensics

   Python 2

6. INDXRipper INDXRipper Public

   Forked from harelsegev/INDXRipper

   Carve file metadata from NTFS index ($I30) attributes

   Python