sketchymoose / TotalRecall

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

TotalRecall

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Now has some sqllite DB functionality. It is being (currently) set up to run on RemNux v4.

See the downloadable documentation for more information. This is still in BETA so bugs are (probably) rampant!

About

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.


Languages

Language:Python 100.0%