amcache-evilhunter

AmCache-EvilHunter AmCache-EvilHunter는 Windows Amcache.hve 레지스트리 하이브를 파싱하고 분석하여 실행 증거와 의심스러운 실행 파일을 식별하고, VirusTotal/OpenTIP 조회를 통합하여 향상된 위협 인텔리전스를 제공하는 명령줄 도구입니다. https://github.com/user-attachments/assets/e23fb99b-48ad-4260-b372-2f15e5320c74 특징 오프라인 Amcache.hve 레지스트리 하이브를 파싱합니다. 날짜 범위로 레코드를...

Top 5 Ways Broken Triage Increases Business Risk Instead of Reducing It

Triage is supposed to make things simpler. In a lot of teams, it does the opposite. When you can’t reach a confident verdict early, alerts turn into repeat checks, back-and-forth, and “just escalate it” calls. That cost doesn’t stay inside the SOC; it shows up as missed SLAs, higher cost per case...

Amcache Evilhunter Tool

AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...