davehull/body-outliers davehull/body-outliers

  • Stars
    star
    5
  • Rank 2,861,937 (Top 57 %)
  • Language
    Python
  • Created about 13 years ago
  • Updated about 13 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
davehull/body-outliers
github

davehull

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A Python script for finding outliers in fls bodyfiles (see The Sleuth Kit) based on given metadata elements like metadata address, atime, ctime, crtime and mtime.

More Repositories

1

Kansa

A Powershell incident response framework
PowerShell
1,539
star
2

Mal-Seine

Why hunt when you can seine?
PowerShell
21
star
3

VirusTotalShell

A fork of David B Heise's VirusTotal Powershell Module
PowerShell
17
star
4

Get-StakRank

A Powershell script for frequency analysis of separated values data files.
PowerShell
17
star
5

autorunalyzer

A Python script for performing analysis of the output from Microsoft's Sysinternals Autoruns.
Shell
15
star
6

MCC

Tracking my work through the Matasano Crypto Challenges
PowerShell
8
star
7

body-ugid-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of u/gids per directory. This has been useful for finding malicious code that an attacker has placed on a Linux host while neglecting to change u/gids to match "normal" values for the given directory.
Python
4
star
8

body-meta-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of the metadata element passed as an argument.
Python
4
star
9

PSProfile

A new repo to contain my psprofile
PowerShell
3
star
10

Get-WebFile

Powershell script based on Boe Prox's Get-WebPage.ps1, but this one pulls down a specific file
3
star
11

Exif2GeoRSS

Takes GPS Exif metadata from image files (or whatever) and creates a GeoRSS file suitable for import into Bing Maps. See http://trustedsignal.blogspot.com/2012/02/plotting-photo-location-data-with-bing.html.
Python
3
star
12

meta-outliers

A Python script that finds files with metadata addresses that are n standard deviations from the average metadata address of files on a per directory basis.
Python
3
star
13

Get-Fields

Returns the field names from a separated values file, assuming the first line contains a header.
1
star
14

Add-Header

Utility script for adding a header to a data file
PowerShell
1
star