Pinned

1. LogViewer2 Public

   Application for viewing/searching large text/log files (WPF port of the original LogViewer)

   C# 26 7

2. autorunner Public

   Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing

   C# 46 4

3. volatility-runner Public

   volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

   Go 10 2

4. SessionViewer Public

   SessionViewer is a PCAP TCP session reconstructor with a UI to view the data flows, and export data

   C# 11 3

5. lookuper Public

   Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...

   Go 28 6

6. wmi-parser Public

   Parses the WMI object database....looking for persistence

   C# 21 5