
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
defensive-toolsdigital-forensicsforensics+4

Rapidly Search and Hunt through Windows Forensic Artefacts

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

Extract useful information from PANOS support file for CVE-2024-3400

Post-Exploitation EVTX Analyzer for BloodHound Mapping

This is a repo for fetching Applocker event log by parsing the win-event log