
DFIR-Companion
DFIR forensics companion server + capture extension
ai-securitydefensive-toolsdigital-forensics+9
362 days ago

DFIR forensics companion server + capture extension

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

A swiss-knife MCP server for analysing PCAP files

Downloaded a packet capture (.pcapng) file from malware-traffic-analysis.net which was an example of an attempted attack against a webserver using…

Technical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.