EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
fbclicker is a set of scripts (currently only 1) to automate browsing activities on Facebook using Selenium.
GCP IR Notes
Scripts that mount and unmount HFS e01 images; based on SANS FOR518 method 1
Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files