MFTExtractor
0 (0)
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
PSRecon is a PowerShell-based incident response and live forensic data acquisition tool that gathers data from a remote Windows host, organizes the data into folders, hashes all extracted data, and sends the data to the security team. It also includes endpoint lockdown functionality, allowing users to disable an active directory account or quarantine the host until IT/Security can respond. The tool provides a detailed report that is self-contained, making it easy to share. It can be integrated with the organization's Active Defense frameworks to automate rapid forensic data acquisition and lock down the endpoint. PSRecon can be run on local or remote hosts, and offers various options for enabling PSRemoting and Unrestricted PowerShell Execution.
A tool for parsing and extracting information from the Master File Table of NTFS file systems.
Open Source computer forensics platform with modular design for easy automation and scripting.
A repository containing material from a talk on sub-domain enumeration techniques
No More Ransom is a collaborative project to combat ransomware attacks by providing decryption tools and prevention advice.
A command-line tool for extracting detailed information from JPEG files, including image dimensions, compression, and metadata.
Exterro is a data risk management platform that optimizes e-discovery, digital forensics, and cybersecurity compliance operations.