Joakim Schicht (@jschicht)
github

jschicht

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    1,650
  • Global Rank 18,763 (Top 0.7 %)
  • Followers 448
  • Registered almost 11 years ago
  • Most used languages
    AutoIt     88.2 %
    C
         8.8 %
    PowerShell
         2.9 %
  • Location 🇳🇴 Norway
  • Country Total Rank 105
  • Country Ranking
    AutoIt     1
    C
         106
    PowerShell
         117

Top repositories

1

RunAsTI

Launch processes with TrustedInstaller privilege
AutoIt
381
star
2

RawCopy

Commandline low level file extractor for NTFS
AutoIt
271
star
3

Mft2Csv

Extract $MFT record info and log it to a csv file.
AutoIt
252
star
4

LogFileParser

Parser for $LogFile on NTFS
AutoIt
183
star
5

ExtractUsnJrnl

Tool to extract the $UsnJrnl from an NTFS volume
AutoIt
104
star
6

UsnJrnl2Csv

Parser for $UsnJrnl on NTFS
AutoIt
102
star
7

SetMace

Manipulate timestamps on NTFS
AutoIt
47
star
8

EaTools

Analysis and manipulation of extended attribute ($EA) on NTFS
AutoIt
37
star
9

Indx2Csv

An advanced parser for INDX records
AutoIt
24
star
10

PowerMft

Powerful commandline $MFT record editor.
AutoIt
22
star
11

SectorIo

Kernel mode driver for writing to physical disk with SL_FORCE_DIRECT_WRITE
C
22
star
12

Secure2Csv

Decode security descriptors in $Secure on NTFS
AutoIt
20
star
13

NtfsFileExtractor

Extract files off NTFS
AutoIt
19
star
14

MftCarver

Carve $MFT records from a chunk of data (for instance a memory dump)
AutoIt
16
star
15

SetRegTime

Registry timestamp manipulation
AutoIt
16
star
16

HideAndProtect

Makes files super hidden on NTFS
AutoIt
14
star
17

NtSuspendProcess

Suspend and resume processes by using functions in ntdll.dll.
13
star
18

MftRcrd

Command line $MFT record decoder
AutoIt
11
star
19

StegoMft

PoC for hiding data within $MFT
AutoIt
11
star
20

IndxCarver

Carve INDX records from a chunk of data.
AutoIt
9
star
21

UsnJrnlCarver

Carving Usn pages (UsnJrnl records)
AutoIt
9
star
22

MyDiskEraser

How to make your own disk erasing boot cd.
AutoIt
8
star
23

NativeRegMod

A native application that can modify registry
C
6
star
24

RegKeyFixer

Dealing with certain invalid registry keys
AutoIt
6
star
25

RcrdCarver

Carve RCRD records ($LogFile) from a chunk of data.
AutoIt
5
star
26

ProcessCritical

Manipulate ProcessBreakOnTermination in ProcessInfoClass on any process from command line
5
star
27

ExtractAllAttributes

Extracts all attributes of files on NTFS
AutoIt
5
star
28

MakeImage

Create graphic bitmap from binary data.
AutoIt
4
star
29

ExtractFromDataRun

Extract files from NTFS by run list
AutoIt
4
star
30

RemoveCertificate

Removes the authenticode digital signature (certificate) from an executable
AutoIt
4
star
31

MakeContainer

Tools to create special containers for patched VeraCrypt/TrueCrypt
AutoIt
4
star
32

Tiny_NTFS

Smallest possible size of a NTFS partition
3
star
33

HexDump

Dump binary data to console from file or disk
AutoIt
3
star
34

PartDump

Utility to dump basic volume information from a disk object.
AutoIt
3
star
35

RawDir

A low level dir command for NTFS volumes
AutoIt
3
star
36

Volsnap-Bug-Content

Content for a volsnap.sys bug analysis
PowerShell
1
star
37

VeraCrypt

Tweaked version for supporting arbitrary offsets.
C
1
star
38

GetProcAddressGUI

Retrieve shellcode formatted address of function from module
1
star
39

Binary2Bmp

Turn any file into a bmp
1
star