Pinned

1. LogViewer2

   Application for viewing/searching large text/log files (WPF port of the original LogViewer)

   C# 14 3

2. autorunner

   Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing

   C# 42 4

3. volatility-runner

   volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

   Go 8 1

4. SessionViewer

   SessionViewer is a PCAP TCP session reconstructor with a UI to view the data flows, and export data

   C# 10 2

5. lookuper

   Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...

   Go 21 5

6. wmi-parser

   Parses the WMI object database....looking for persistence

   C# 16 4