davehull/meta-outliers davehull/meta-outliers

  • Stars
    star
    3
  • Rank 3,963,521 (Top 79 %)
  • Language
    Python
  • Created about 13 years ago
  • Updated about 13 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
davehull/meta-outliers
github

davehull

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A Python script that finds files with metadata addresses that are n standard deviations from the average metadata address of files on a per directory basis.

More Repositories

1

Kansa

A Powershell incident response framework
PowerShell
1,539
star
2

Mal-Seine

Why hunt when you can seine?
PowerShell
21
star
3

VirusTotalShell

A fork of David B Heise's VirusTotal Powershell Module
PowerShell
17
star
4

Get-StakRank

A Powershell script for frequency analysis of separated values data files.
PowerShell
17
star
5

autorunalyzer

A Python script for performing analysis of the output from Microsoft's Sysinternals Autoruns.
Shell
15
star
6

MCC

Tracking my work through the Matasano Crypto Challenges
PowerShell
8
star
7

body-outliers

A Python script for finding outliers in fls bodyfiles (see The Sleuth Kit) based on given metadata elements like metadata address, atime, ctime, crtime and mtime.
Python
5
star
8

body-ugid-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of u/gids per directory. This has been useful for finding malicious code that an attacker has placed on a Linux host while neglecting to change u/gids to match "normal" values for the given directory.
Python
4
star
9

body-meta-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of the metadata element passed as an argument.
Python
4
star
10

PSProfile

A new repo to contain my psprofile
PowerShell
3
star
11

Get-WebFile

Powershell script based on Boe Prox's Get-WebPage.ps1, but this one pulls down a specific file
3
star
12

Exif2GeoRSS

Takes GPS Exif metadata from image files (or whatever) and creates a GeoRSS file suitable for import into Bing Maps. See http://trustedsignal.blogspot.com/2012/02/plotting-photo-location-data-with-bing.html.
Python
3
star
13

Get-Fields

Returns the field names from a separated values file, assuming the first line contains a header.
1
star
14

Add-Header

Utility script for adding a header to a data file
PowerShell
1
star