
RecoverPy
Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

Windows host DFIR triage console that chains artefact collection, Sigma-correlated timelines, YARA scans, socket and account inspection, indicator…

ETW-based Windows process creation logger that enriches events with file hashes, signatures, and parent process details, outputting to Windows…

Central console for Douglas-042 HEADQUARTERS collectors. Sweeps a fleet, correlates results across hosts, and manages IOC feeds and SIEM delivery…

Commandline low level file extractor for NTFS

Powershell module for VMWare vSphere forensics