CyberPipe

CyberPipe v5.3 （原名 CSIRT-Collect） 一个易于使用的PowerShell脚本，用于收集内存和磁盘取证数据，以用于数字取证与事件响应（DFIR）调查。 功能： 🐏 使用MAGNET DumpIt（支持x86、x64和ARM64）或MAGNET RAM Capture（用于旧系统）捕获内存镜像。 💻 使用MAGNET Response CLI收集分类数据，可选择预设配置文件或自定义选项。 🔐 使用MAGNET Encrypted Disk Detector检测全盘加密。 🔑 从所有加密卷中恢复BitLocker恢复密钥。 💾...

sleuthkit

The Sleuth Kit INTRODUCCIÓN The Sleuth Kit es un kit de herramientas forense de código abierto para analizar sistemas de archivos y discos de Microsoft y UNIX. The Sleuth Kit permite a los investigadores identificar y recuperar evidencia de imágenes adquiridas durante la respuesta a incidentes o ...

encrypted-linux-kernel-modules

ELKM: Módulos de kernel cargables cifrados para Linux x86-64 ELKM proporciona un mecanismo para transportar y cargar de forma segura Módulos de Kernel Cargables LKM cifrados. El objetivo es proteger rootkits e implantes basados en kernel contra la observación por parte del software de Detección y...

PT-2026-70212

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The NTFS parsing library contains multiple out-of-bounds and memory exhaustion bugs. These issues can be triggered when the software processes maliciously crafted NTFS images, such as...

Velociraptor Version 0.6.4: Dead Disk Forensics and Better Path Handling Let You Dig Deeper

Rapid7 is pleased to announce the release of Velociraptor version 0.6.4 – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. This release has been in development and testing for several months now and has a lot o...

Dr0p1t Framework 1.3 - A Framework That Creates An Advanced FUD Dropper With Some Tricks

Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks! Features Generated executable properties: The executable size is smaller compar...