ma2tl

ma2tl macapt to timeline This is a DFIR tool for generating a macOS forensic timeline from the analysis result DBs of macapt. Requirements Python 3.7.0 or later pytz tzlocal xlsxwriter Installation root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git Usage root@kitploit: % python...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

timesketch

Timesketch Tabla de contenidos 1. Acerca de Timesketch 2. Primeros pasos 3. Comunidad 4. Contribuciones Acerca de Timesketch...

ma2tl

ma2tl macapt 到时间线 这是一个DFIR工具，用于从macapt的分析结果数据库生成macOS法医时间线。 需求 Python 3.7.0 或更高版本 pytz tzlocal xlsxwriter 安装 root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git 用法 root@kitploit: % python ./ma2tl.py -h usage: ma2tl.py -h -i INPUT -o OUTPUT -ot OUTPUTTYPE -s START -e END -t TIMEZONE -l...

autotimeliner

AutoTimeliner Estrai automaticamente la timeline forense dai dump di memoria volatile. AutoTimeliner esegue molteplici plugin di Volatility3 su immagini di memoria Windows, Linux e macOS, quindi unisce il loro output in un'unica timeline CSV ordinata: Plugin Generico per Timeline Plugin| Cosa...

Active Directory Honeytoken Tripwire: DCEPT

DCEPT D omain C ontroller E nticing P assword T ripwire is a honeytoken-based tripwire for Microsoft’s Active Directory. Honeytokens are pieces of information intentionally littered on system so they can be discovered by an intruder. In the case of DCEPT, the honeytokens are credentials that woul...