CyberPipe

CyberPipe v5.3 formerly CSIRT-Collect An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations. Functions: 🐏 Capture a memory image with MAGNET DumpIt supports x86, x64, and ARM64 or MAGNET RAM Capture for legacy systems. 💻 Collect triage data using MAGNET...

sleuthkit

The Sleuth Kit INTRODUCCIÓN The Sleuth Kit es un kit de herramientas forense de código abierto para analizar sistemas de archivos y discos de Microsoft y UNIX. The Sleuth Kit permite a los investigadores identificar y recuperar evidencia de imágenes adquiridas durante la respuesta a incidentes o ...

encrypted-linux-kernel-modules

ELKM: Módulos de kernel cargables cifrados para Linux x86-64 ELKM proporciona un mecanismo para transportar y cargar de forma segura Módulos de Kernel Cargables LKM cifrados. El objetivo es proteger rootkits e implantes basados en kernel contra la observación por parte del software de Detección y...

PT-2026-70212

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The NTFS parsing library contains multiple out-of-bounds and memory exhaustion bugs. These issues can be triggered when the software processes maliciously crafted NTFS images, such as...

Velociraptor Version 0.6.4: Dead Disk Forensics and Better Path Handling Let You Dig Deeper

Rapid7 is pleased to announce the release of Velociraptor version 0.6.4 – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. This release has been in development and testing for several months now and has a lot o...

Dr0p1t Framework 1.3 - A Framework That Creates An Advanced FUD Dropper With Some Tricks

Have you ever heard about trojan droppers ? In short dropper is type of trojans that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks! Features Generated executable properties: The executable size is smaller compar...