8 matches found
Crow-Eye
Crow-Eye β Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect β it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview β¨ Highlights π₯ Who Crow-Eye Is For ...
rifiuti2
IntroducciΓ³n Rifiuti2 es una herramienta para analizar archivos INFO2 de la Papelera de Reciclaje de Windows. El anΓ‘lisis de la Papelera de Reciclaje de Windows se realiza normalmente durante la informΓ‘tica forense en Windows. Rifiuti2 puede extraer la hora de eliminaciΓ³n de archivos, la ruta...
ForensicMiner
ForensicMiner v1.4 "ForensicMiner, redefine las automatizaciones de DFIR" Creado y mantenido por: Eilay Yosfan ΒΏQuΓ© es ForensicMiner? ForensicMiner, una herramienta de automatizaciΓ³n de DFIR basada en PowerShell, revoluciona el campo de las investigaciones digitales. DiseΓ±ada para la eficiencia,...
afot
Automation FOrensics Tool Automation FOrensics Tool AFOT es una herramienta de automatizaciΓ³n construida en Python y utilizada para informΓ‘tica forense en Windows con el fin de combinar las siguientes herramientas: AnalyzePESig http://didierstevens.com/files/software/AnalyzePESigV0002.zip Nationa...
GhostTrace
GhostTrace Encuentra lo que el software dejΓ³ atrΓ‘s en Windows, antes de que regrese. GhostTrace es un cazador local de rastros forenses de Windows para respondedores de incidentes, administradores de sistemas y usuarios avanzados con mentalidad de seguridad. Mapea persistencia, ejecuciΓ³n, activid...
Crow-Eye v0.13.0
Crow-Eye β Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect β it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview β¨ Highlights π₯ Who Crow-Eye Is For ...
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts Chainsaw provides a powerful βfirst-responseβ capability to quickly identify threats within Windows forensic artefacts such as Event Logs and the MFT file. Chainsaw offers a generic and fast method of searching through event logs for...
Forensic journey: hunting evil within AmCache
Introduction When it comes to digital forensics, AmCache plays a vital role in identifying malicious activities in Windows systems. This artifact allows the identification of the execution of both benign and malicious software on a machine. It is managed by the operating system, and at the time o...