ForensicArtifacts/artifacts-kb

Improve check_artifacts.py script

Opened this issue 3 years ago · 0 comments

joachimmetz commented 3 years ago

add support to determine content of compressed SCCA files
add support for Windows Registry artifacts
idea: use CIM for WMI artifacts?