AbdulRhmanAlfaifi

AbdulRhman Alfaifi's repositories

Fennec

Artifact collection tool for *nix systems

Language:RustApache-2.0191 5 11

Rhaegal

Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs

Language:PythonGPL-3.039 7 2

CryptnetURLCacheParser

CryptnetURLCacheParser is a tool to parse CryptAPI cache files

Language:PythonMIT16 20

lnk_parser

lnk_parser is a full rust implementation to parse windows LNK files

Language:RustMIT16 3 2

SDSParser-rs

NTFS Security Descriptor Stream ($Secure:$SDS) parser

Language:RustMIT13 20

EventLogMonitor

EventLogMonitor hooks into Window Event Logs and display the new event as they written to the log.

Language:C#8 10

winparsingtools

collection of structs and utilities for parsing windows binary formats.

Language:RustMIT8 20

osqueryIR

osqueryIR is an artifact collection tool for Linux systems.

Language:Python7 10

osquery-rs

This crate allows you to execute osquery SQL queries using osquery Thrift API

Language:Rust6 20

CryptnetURLCacheParser-rs

A rust parser for CryptnetURLCache metadata files.

Language:RustMIT4 30

notepad_parser

A Rust parser for Notepad TabState artifact

Language:RustApache-2.0400

SDSParser-py

NTFS Security Descriptor Stream ($Secure:$SDS) parser, Python bindings for https://github.com/AbdulRhmanAlfaifi/SDSParser-rs

Language:Rust4 10

RecycleBinParser-rs

Parser for Recycle Bin $I files

Language:Rust3 10

CommentRetriever

A python script to extract comment from any webpage.

Language:PythonGPL-3.02 10

GetDocsWithMacros

A python script that takes a path as input then go recursively looking for office file that contains macros.

Language:Python2 10

libtsk-rs

Wrapper for TSK (Sleuth Kit) Bindings

Language:RustApache-2.02 20

Kuiper

Digital Forensics Investigation Platform

Language:JavaScript100

Loki

Loki - Simple IOC and Incident Response Scanner

Language:PythonGPL-3.01 10

morsecoder

Command line tool to encode message to morse code and decode morse code to clear message.

Language:PythonGPL-3.01 10

cve-2020-0688

Language:Python010

pyevtx-rs

Python bindings for https://github.com/omerbenamram/evtx/

Language:Rust000

shields

Concise, consistent, and legible badges in SVG and raster format

Language:JavaScriptCC0-1.0000

winstructs

Parsers for common structures across windows formats.

Language:RustApache-2.0000