Pinned Loading

1. LogViewer2 LogViewer2 Public

   Application for viewing/searching large text/log files (WPF port of the original LogViewer)

   C# 53 9

2. autorunner autorunner Public

   Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing

   C# 54 4

3. volatility-runner volatility-runner Public

   volatility-runner is a command line application designed to speed up memory forensics using the volatility framework, primarily for instances where the user has multiple memory dumps to analyse.

   Go 11 3

4. SessionViewer SessionViewer Public

   SessionViewer is a PCAP TCP session reconstructor with a UI to view the data flows, and export data

   C# 12 5

5. lookuper lookuper Public

   Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...

   Go 36 8

6. wmi-parser wmi-parser Public

   Parses the WMI object database....looking for persistence

   C# 31 8