AbdulRhmanAlfaifi/osquery-rs

Stars
6
Rank 2,468,201 (Top 50 %)
Language
Rust
Created over 2 years ago
Updated over 1 year ago

AbdulRhmanAlfaifi/osquery-rs

AbdulRhmanAlfaifi

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This crate allows you to execute osquery SQL queries using osquery Thrift API

Fennec

Artifact collection tool for *nix systems

Rhaegal

Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs

SDSParser-rs

NTFS Security Descriptor Stream ($Secure:$SDS) parser

CryptnetURLCacheParser

CryptnetURLCacheParser is a tool to parse CryptAPI cache files

lnk_parser

lnk_parser is a full rust implementation to parse windows LNK files

osqueryIR

osqueryIR is an artifact collection tool for Linux systems.

winparsingtools

collection of structs and utilities for parsing windows binary formats.

CryptnetURLCacheParser-rs

A rust parser for CryptnetURLCache metadata files.

SDSParser-py

NTFS Security Descriptor Stream ($Secure:$SDS) parser, Python bindings for https://github.com/AbdulRhmanAlfaifi/SDSParser-rs

RecycleBinParser-rs

Parser for Recycle Bin $I files

GetDocsWithMacros

A python script that takes a path as input then go recursively looking for office file that contains macros.

EventLogMonitor

EventLogMonitor hooks into Window Event Logs and display the new event as they written to the log.

CommentRetriever

A python script to extract comment from any webpage.

morsecoder

Command line tool to encode message to morse code and decode morse code to clear message.