
dfir-orc
Forensics artefact collection tool for systems running Microsoft Windows
defensive-toolsdigital-forensicsforensics+2

Forensics artefact collection tool for systems running Microsoft Windows

Turn any collection of documents into a knowledge graph. Extract entities and relationships via LLM, deduplicate with your approval. Map domains,…

Brute-force tool that recovers full executable paths from Windows prefetch hashes using bodyfiles, supporting XP, Vista, and 2008 hash functions for…

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

Automated forensic script hunting for cve-2019-19781