cristianzsh / forensictools Goto Github PK

Could you please also add scdbg ?
http://sandsprite.com/blogs/index.php?uid=7&pid=152

Could you please add Eric Zimmerman's Timeline Explorer?
https://ericzimmerman.github.io/#!index.md

is there an option for command line install so the build can be automated?

Could you please also add Wireshark, Tshark?
https://www.wireshark.org/download.html

Would you please consider adding Arsenal Image Mounter ?
https://github.com/ArsenalRecon/Arsenal-Image-Mounter

Would you please consider adding DB Browser for SQLite?
https://sqlitebrowser.org/

Would you please consider adding CyberChef as an offline copy set to launch via the browser?
https://gchq.github.io/CyberChef/CyberChef_v10.5.2.zip

Could you please add The Sleuth Kit, or parts of it such as fls, icat, istat?
https://www.sleuthkit.org/sleuthkit/download.php

Is it possible to expand it to be more automated by adding automatically downloads of exe's, unzipping the downloads that need it and do a hash check against a list hardcoded or something?

That would have been amazing!

Can you please add MemProcFS to your list of tools, for me it has been a gamechanger!
https://github.com/ufrisk/MemProcFS

PPEE (puppy) is a Professional PE file Explorer for reversers, malware researchers and those who want to statically inspect PE files in more detail. Some of the features include:

• Very fast malware static analysis tool
• Both PE32 and PE64 support
• Examine Yara rules against opened file
• Virustotal and OPSWAT's Metadefender query report
• Statically analyze windows native and .Net executables
• Parse Rich Header
• Parse Safe SEH, Control Flow Guard Functions, Enclave Configuration and Volatile information in load config directory
• Edit almost every PE data structure
• Entropy, SSDEEP, TLSH, CRC32, ImpHash, MD5, SHA1, SHA256 and Authentihash calculation of the files
• View strings including URL, Registry, Suspicious, ... embedded in files

Website: https://mzrst.com/