3 open source projects by AndrewRathbun

A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update.

✭ 24

windows research dfir hashes incidentresponse

2. DFIRRegex

A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.

✭ 33

regex dfir grep kape digitalforensics eztools

3. EventTranscript.db-Research

A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.

✭ 33

dfir windows10 research-and-development kape digitalforensics windows11 eztools

1-3 of 3 user projects