Pdb-Magician

Parse PDB Files and generates C# class library which helps with interpreting memory images.

Memory-Explorer

Memory Explorer is an experimental forensics tool which allows you to examine Windows Memory Images and on a good day when the driver is being friendly, on the live system as well.

Forensic-Explorer-Archive

An experiment in Docker land

wireshark

Docker build container for the Windows version of Wireshark

Docker

A collection of dockerfile and docker-compose experiments