
moria
IoT firmware identification and extraction

IoT firmware identification and extraction

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Incident Response & Digital Forensics Debugging Extension

Digital forensic acquisition tool for Windows based incident response.

Active Directory NTDS database parser that dumps records to JSON, supports object filtering, and decrypts encrypted columns using SYSTEM hive or…

Volatility 3 ported to Rust. Same output, much faster.

Automated PowerShell script for forensically sound Windows memory acquisition, including crash/raw dumps, pagefile collection, triage artifacts, and…

Blue Team detection lab created with Terraform and Ansible in Azure.

Incident Response Triage - Windows Evidence Collection for Forensic Analysis


A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.

Detection Script for MongoBleed Exploitation

Brute-force tool that recovers full executable paths from Windows prefetch hashes using bodyfiles, supporting XP, Vista, and 2008 hash functions for…

Offset Independent Credential Extraction Tool

A swiss-knife MCP server for analysing PCAP files

KeePass 2.X dumper (CVE-2023-32784)