windows-forensics

There are 4 repositories under windows-forensics topic.

• andyjsmith / Registry-Spy

  Cross-platform registry browser for raw Windows registry files

  registryforensicsforensics-toolswindows-forensicsgui
  Language:Python 67

• andyjsmith / Exe-Spy

  ExeSpy is a cross-platform PE viewer for EXE and DLL files

  forensicsforensics-toolswindows-forensicspe-fileportable-executablegui
  Language:Python 49

• andyjsmith / Command-Spy

  Command Spy is a utility for monitoring the command line arguments of new processes on Windows. Made for CCDC.

  windows-forensicsccdcmonitoringsystem-monitoring
  Language:C# 9

• EvolvingSysadmin / Blue-Team-Toolkit

  Tools and Techniques for Digital Forensics and Incident Response

  dfirdigital-forensicsdigital-forensics-incident-responseincident-responselinux-forensicswindows-forensics
  6

• mrajweir / LnkAnalyser

  Python module for forensic analysis of Windows shortcuts (LNK files). You can install this package using pip install lnkanalyser

  forensicswindows-forensicsshortcuts
  Language:Python 6

• mazyaar / Windows_Forensic_Investigation_8_parts

  When conducting an investigation on a Windows machine there are 8 phase to go through, today we’ll discuss the first ‘Collecting Volatile Information’, and the rest will be explained in future topics

  cybersecurityforensicsforensics-toolsinvestigationwindowswindows-forensicssans500cyber-securitycyberred
  3

• tymyrddin / blue-dfir

  Digital forensics and incident response

  dfirvolatilityautopsylinux-forensicswindows-forensicskaperedlinethehivevelociraptorwriteups
  Language:CSS 1

• randomSapien / usbHound

  Gives you the list of storage devices that has been connected to your windows machine

  securityforensicsusb-devicespython3pythonwindows-10usbdigital-forensicsusb-forensicswindows-forensics
  Language:Python 0

• computerforensicslab / windows-forensic-artifacts

  Handbook of windows forensic artifacts across multiple Windows version with interpretation tips with some examples. Work in progress!

  windows-forensicswin-artefactswindows-artefact-library