Pinned

1. LogViewer2 Public

   Application for viewing/searching large text/log files (WPF port of the original LogViewer)

   C# 23 8

2. autorunner Public

   Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing

   C# 45 4

3. volatility-runner Public

   volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

   Go 8 1

4. SessionViewer Public

   SessionViewer is a PCAP TCP session reconstructor with a UI to view the data flows, and export data

   C# 11 3

5. lookuper Public

   Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...

   Go 25 6

6. wmi-parser Public

   Parses the WMI object database....looking for persistence

   C# 19 4