
TrueTree
A command line tool for pstree-like output on macOS with additional pid capturing capabilities
digital-forensicsforensicsincident-response+1
287

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

Finding secrets in kernel and user memory

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Utility for recovering ES File Explorer encrypted files (.eslock)

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

Detection Script for MongoBleed Exploitation

Windows link file (shortcuts) examiner

Command line tool for scanning streams within office documents plus xor db attack