CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant