evild3ad/yara evild3ad/yara

  • Stars
    star
    1
  • Language YARA
  • Created about 1 year ago
  • Updated 3 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
evild3ad/yara
github

evild3ad

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

YARA rules for MemProcFS-Analyzer

More Repositories

1

MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
PowerShell
433
star
2

Microsoft-Analyzer-Suite

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
PowerShell
249
star
3

Collect-MemoryDump

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
PowerShell
212
star
4

isodump

isodump - ISO dump utility
Python
36
star
5

Get-MiniTimeline

Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE
PowerShell
24
star
6

scripting-snippets

Repository containing shell and python scripting snippets from evild3ad.
Shell
4
star
7

yara-rules

Repository containing YARA rules from evild3ad.
4
star
8

Get-UsnJrnlInfo

Get-UsnJrnlInfo - Get UsnJrnl Information from extracted $Max file
PowerShell
2
star