evild3ad

Hanover, Germany

Pinned Repositories

Collect-MemoryDump
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
Language:PowerShell213 6 226
Get-MiniTimeline
Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE
Language:PowerShell22 3 02
Get-UsnJrnlInfo
Get-UsnJrnlInfo - Get UsnJrnl Information from extracted $Max file
Language:PowerShell3 2 02
isodump
isodump - ISO dump utility
Language:Python35 4 08
MemProcFS-Analyzer
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
Language:PowerShell401 20 2644
Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
Language:PowerShell94 1 09
Microsoft-Extractor-Suite
A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
Language:PowerShell2 0 00
rules
Repository of yara rules
Language:Shell0 2 00
scripting-snippets
Repository containing shell and python scripting snippets from evild3ad.
Language:Shell5 2 01
yara-rules
Repository containing YARA rules from evild3ad.
5 4 03

evild3ad/MemProcFS-Analyzer
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
Language:PowerShell401 20 2644
evild3ad/Collect-MemoryDump
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
Language:PowerShell213 6 226
evild3ad/Microsoft-Analyzer-Suite
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
Language:PowerShell94 1 09
evild3ad/isodump
isodump - ISO dump utility
Language:Python35 4 08
evild3ad/Get-MiniTimeline
Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE
Language:PowerShell22 3 02
evild3ad/scripting-snippets
Repository containing shell and python scripting snippets from evild3ad.
Language:Shell5 2 01
evild3ad/yara-rules
Repository containing YARA rules from evild3ad.
5 4 03
evild3ad/Get-UsnJrnlInfo
Get-UsnJrnlInfo - Get UsnJrnl Information from extracted $Max file
Language:PowerShell3 2 02
evild3ad/Microsoft-Extractor-Suite
A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
Language:PowerShell2 0 00
evild3ad/rules
Repository of yara rules
Language:Shell0 2 00
evild3ad/yara
YARA rules for MemProcFS-Analyzer
Language:YARA0 2 00