AbdulRhmanAlfaifi/osqueryIR

This repository has been archived on 13/Feb/2022
Stars
7
Rank 2,294,772 (Top 46 %)
Language
Python
Created about 3 years ago
Updated almost 2 years ago

AbdulRhmanAlfaifi/osqueryIR

AbdulRhmanAlfaifi

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

osqueryIR is an artifact collection tool for Linux systems.

Fennec

Artifact collection tool for *nix systems

Rhaegal

Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs

SDSParser-rs

NTFS Security Descriptor Stream ($Secure:$SDS) parser

CryptnetURLCacheParser

CryptnetURLCacheParser is a tool to parse CryptAPI cache files

lnk_parser

lnk_parser is a full rust implementation to parse windows LNK files

winparsingtools

collection of structs and utilities for parsing windows binary formats.

osquery-rs

This crate allows you to execute osquery SQL queries using osquery Thrift API

CryptnetURLCacheParser-rs

A rust parser for CryptnetURLCache metadata files.

SDSParser-py

NTFS Security Descriptor Stream ($Secure:$SDS) parser, Python bindings for https://github.com/AbdulRhmanAlfaifi/SDSParser-rs

RecycleBinParser-rs

Parser for Recycle Bin $I files

EventLogMonitor

EventLogMonitor hooks into Window Event Logs and display the new event as they written to the log.

CommentRetriever

A python script to extract comment from any webpage.

GetDocsWithMacros

A python script that takes a path as input then go recursively looking for office file that contains macros.

morsecoder

Command line tool to encode message to morse code and decode morse code to clear message.