
velociraptor
Endpoint visibility and collection tool using VQL queries for host-based state information gathering, incident response triage, and forensic artifact…

Endpoint visibility and collection tool using VQL queries for host-based state information gathering, incident response triage, and forensic artifact…

Rust-based pattern matching engine for malware researchers. Create YARA rules with textual/binary patterns, wildcards, and regex to identify and…

Open-source Windows forensics engine that acquires, parses, and correlates artifacts (MFT, USN, Registry, etc.) to reconstruct timelines with…

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…