
FileWatchTower
FWT is a security analysis and file monitoring tool that utilizes Sysmon events.

FWT is a security analysis and file monitoring tool that utilizes Sysmon events.



A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

A malware analysis and classification tool.

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

Python library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.

Recursively scan folders with VirusTotal API to detect malware. Features hash lookup, CSV export, real-time progress, and rate-limit handling for…

Software to identify the different types of hashes -

Cross-platform hashing toolset for computing message digests (MD5, SHA-1, SHA-256, Tiger, Whirlpool) with recursive directory traversal and file…



Binary and Directory tree comparison tool using Fuzzy Hashing

Offset Independent Credential Extraction Tool

Collection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…