Pinned Loading

1. Trawler Trawler Public

   PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.

   PowerShell 310 33

2. LogBoost LogBoost Public

   Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indicator matches.

   Go 98 1

3. RetrievIR RetrievIR Public

   PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

   PowerShell 91 14

4. crackdown crackdown Public

   Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.

   Go 15 3

5. velociraptor-timeline-creator velociraptor-timeline-creator Public

   VTC - Velociraptor Timeline Creator

   Go 15 2

6. differ differ Public

   An easy-to-use, cross-platform utility for capturing and diffing file system metadata snapshots.

   Go 3 1