MasterParser Logo

MasterParser

0
Free
Visit Website

MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifically designed to expedite the investigative process for security incidents on Linux systems, MasterParser adeptly scans supported logs, such as auth.log for example, extract critical details including SSH logins, user creations, event names, IP addresses and much more. The tool's generated summary presents this information in a clear and concise format, enhancing efficiency and accessibility for Incident Responders. Beyond its immediate utility for DFIR teams, MasterParser proves invaluable to the broader InfoSec and IT community, contributing significantly to the swift and comprehensive assessment of security events on Linux platforms

FEATURES

ALTERNATIVES

Forensics tool for exploring offline Docker filesystems.

Generate comprehensive reports about Windows systems with detailed system, security, networking, and USB information.

GVfs is a userspace virtual filesystem implementation for GIO with various backends and features.

Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.

MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.

A software that collects forensic artifacts on systems for forensic investigations.

A library to access the Extensible Storage Engine (ESE) Database File (EDB) format used in various Windows applications.

iOS Mobile Backup Xtractor tool for extracting iOS backups.

PINNED