
truffleproc
truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
debuggersdigital-forensicsmemory-forensics+1
129

truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)

DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt,…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Hunts out CobaltStrike beacons and logs operator command output

Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes.

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…