Pinned

1. LogViewer2 LogViewer2 Public

   Application for viewing/searching large text/log files (WPF port of the original LogViewer)

   C# 38 10

2. autorunner autorunner Public

   Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing

   C# 48 6

3. volatility-runner volatility-runner Public

   volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

   Go 10 3

4. SessionViewer SessionViewer Public

   SessionViewer is a PCAP TCP session reconstructor with a UI to view the data flows, and export data

   C# 11 5

5. lookuper lookuper Public

   Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...

   Go 34 8

6. wmi-parser wmi-parser Public

   Parses the WMI object database....looking for persistence

   C# 28 8