OMENScan

AChoir

Windows Live Artifacts Acquisition Script

AChoirX

ReWrite of AChoir in Go for Cross Platform

AChoir2

WAS the original MSVC fork of AChoir - Now simply functions as a backup.

OMENS

Object Monitor for Enhanced Network Security

AChReport

AChReport is a Python Report Writer for AChoir

Auto4n6

AChoir-Legacy

Original AChoir (MingW/libcurl) - Deprecated (REALLY - Dont use this, its very outdated)

ACHGit

Test Running AChoir via Github Download

AudioTest

Test Embedded MP3 Audio in Github

BTV-DC28

Slides and Information from my Blue Team Village Workshop at DEF CON 28

BTV-DC29

Slides and Data from BTV DC29 Capstone (forensics) workshop

c-aff4

An AFF4 C++ implementation.

chainsaw

Rapidly Search and Hunt through Windows Event Logs

ExtractUsnJrnl

Tool to extract the $UsnJrnl from an NTFS volume

gopsutil

psutil for golang

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

memory

A go function to report total system memory

RawCopy

Commandline low level file extractor for NTFS

RegRipper3.0

RegRipper3.0

simplesyslog

Simple SYSLOG client in Go

sleuthkit

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

SolarCollector

Experimental Self Contained AChoirX Collection for SolarWinds Supply Chain Incidents

TriageReport

Renamed AChReport to TriageReport

UsnJrnl2Csv

Parser for $UsnJrnl on NTFS

w32

A wrapper of windows APIs for the Go Programming Language.

winscp

WinSCP is a popular free SFTP and FTP client for Windows, a powerful file manager that will improve your productivity. It supports also Amazon S3, FTPS, SCP and WebDAV protocols. Power users can automate WinSCP using .NET assembly.