There are no reviews yet. Be the first to send feedback to the community and the maintainers!
ttddbg
Time Travel Debugging IDA pluginWinshark
A wireshark plugin to instrument ETWYagi
Yet Another Ghidra Integration for IDAInvoke-Bof
Load any Beacon Object File using Powershell!comida
An IDA Plugin that help analyzing module that use COMregrippy
A modern Python-3-based alternative to RegRipperetl-parser
Event Trace Log file parser in pure Pythonyara-ttd
Use YARA rules on Time Travel Debugging tracesvbSparkle
VBScript & VBA source-to-source deobfuscator with partial-evaluationntTraceControl
Powershell Event Tracing ToolboxCVE-2024-4040
Scanner for CVE-2024-4040etwbreaker
An IDA plugin to deal with Event Tracing for Windows (ETW)minusone
Powershell LinterPSTrace
Trace ScriptBlock execution for powershell v2tree-sitter-powershell
Powershell grammar for tree-sitterdnYara
A multi-platform .Net wrapper library for the native Yara library.timeliner
A rewrite of mactime, a bodyfile readerSplunk-ETW
A Splunk Technology Add-on to forward filtered ETW events.cacdec
The hidden mstsc recorder playerttd2mdmp
Extract data of TTD trace file to a minidumpdirtypipe-ebpf_detection
An eBPF detection program for CVE-2022-0847mispy
Another MISP module for Pythonmispgo
Golang library for MISPusnrs
USN Journal parsing software and librarynix-forensics
Reproducible forensics environment, 100% of the timeskyblue.team
Our websiteLove Open Source and this site? Check out how you can help us