167 Open source projects that are alternatives of or similar to flare-wmi

Hacker tools on Go (Golang)

An OSINT Metadata analyzing tool that filters through tags and creates reports

Advanced and easy to use penetration testing framework 💣🔎

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

🕵️ A tool for Firefox profile analysis, data extraction, forensics and hardening

Extract WhatsApp private key from any non-rooted Android device (Android 7+ supported)

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

Prowler is an Open Source Security tool for AWS, Azure and GCP to perform Cloud Security best practices assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

Automagically extract forensic timeline from volatile memory dump

Awesome list of digital forensic tools

Invoke-LiveResponse

Alcide Kubernetes Audit Log Analyzer - Alcide kAudit

A collection of tools for forensic analysis

Windows Recycle Bin analyser

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

Copy-move forgery detection on digital image using Python

Useful CTF Tools

Event Trace Log file parser in pure Python

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

Bramble is a hacking Open source suite.

Merge multiple pcap files together, gracefully.

Parses $MFT from NTFS file systems

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

tamper resistant audit log

An AFF4 C++ implementation.

Comae Hibernation File Decompressor

Tracking history of USB events on GNU/Linux

Official Black Hat Arsenal Security Tools Repository

Awesome hacking is an awesome collection of hacking tools.

PowerEvents is a PowerShell module that assists in the registration of WMI permanent event subscriptions.

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

FAT filesystems explore, extract, repair, and forensic tool

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

Change CRC checksums of your files.

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

Python script to decode common encoded PowerShell scripts

TCP/IP packet demultiplexer. Download from:

A program and toolset to analyze iDevice USB sessions

Mobile Revelator

Everything related to Linux Forensics

Video Face Manipulation Detection Through Ensemble of CNNs

No description or website provided.

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

Timeline of Active Directory changes with replication metadata

Super timeline all the things

SIEM Tactics, Techiques, and Procedures

Retrieve Intel AMT's Audit Log from a Linux machine without knowing the admin user's password.

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack

A FUSE module to mount captured network data

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Powerful checksum generator!

UNIX-like reverse engineering framework and command-line toolset

Malware Behavior Analyzer

CoRA Docs

Open Source SIEM (Security Information and Event Management system).

Live system forensic collector

Query and report user logons relations from MS Windows Security Events

Collaborative forensic timeline analysis