edmichael Goto Github PK

lockdown-thumbdrive

mac-locations-scraper

macOS/iOS database location scraper to extract location data

mac_apt

macOS Artifact Parsing Tool

macmru-parser

Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.

malware-gems

A not so awesome list of malware gems for aspiring malware analysts

mantaray

MantaRay Automated Computer Forensic Triage Tool

nccc

nsa-rules

Password cracking rules and masks for hashcat that I generated from cracked passwords.

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

oscp-cheat-sheet

list of useful commands, shells and notes related to OSCP

phone_breaking

probable-wordlists

Wordlists sorted by probability originally created for password generation and testing

rawcopy

Commandline low level file extractor for NTFS

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

sql_blob_script

sqlite-deleted-records-parser

Script to recover deleted entries in an SQLite database

sqlite_miner

A script to mine SQLite databases for hidden gems that might be overlooked

srum-dump

A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.

technomb_2019

Warrant templates discussed during the conference

telegram-passcode-bruteforce

timesketch

Collaborative forensic timeline analysis

transit

MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.

truehunter

Truehunter

usbrip

Simple command line forensics tool for tracking USB device artifacts (history of USB events) on GNU/Linux

velociraptor-docs

Documentation site for Velociraptor

windows-dd

windowsterminal-shell

Install/uninstall scripts for Windows Terminal context menu items

xso-ahs

How to retrieve OSX 10.7+ SHA512 PBKDF2 hashes and a toy hash dictionary attack.