Beast code in Giters

n3l5's repositories

irFARTpull

PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.

Language:PowerShell49 110

irMempull

PowerShell Memory Pulling script

Language:PowerShell18 4 1

irCRpull

irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ system on your network.

Language:PowerShell14 4 1

FARTprocess

Script to process the output from IRFartpull

Language:PowerShell400

netshPacketCap

Powershell script to launch a remote netsh packet trace and pull it for analysis.

Language:PowerShell4 3 1

unBUP

Powershell script to process McAfee Quarantine .bup files.

Language:PowerShell4 30

Submit_ATD_Samples

Python script to submit files in a directory or a single file to an ATD server.

Language:PythonMIT010

Submit_ReversingLabsA1000_Samples

Python script to submit files to your ReversingLabs A1000 api. To make this script work, you'll need to add some things: rl_base_url - this is the URL to your ReversingLabs A1000 rl_token - this is the API key for the account that has an API key in your RL A1000

Language:PythonMIT020

Submit_ThreatGrid_Samples

Python script to submit files to ThreatGrid bulk sample submit api.

Language:PythonMIT020