Pinned Loading

1. Pointman Pointman Public

   Advanced file identifier for Linux, written in Python. Inspired by TrID.

   Python

2. Kestrel Kestrel Public

   Kestrel is a Powershell script designed to pull critical forensic artifacts from a target during IR, for direct analysis on a forensic workstation. It can be run via CrowdStrike RTR or manually via…

   PowerShell 1

3. Emperor Emperor Public

   Emperor is a Bash script for Linux, designed to pull critical forensic artifacts from a target during IR, for direct analysis on a forensic workstation.

   Shell

4. Malware-RE-Write-Ups Malware-RE-Write-Ups Public

   My personal collection of malware analysis write-ups.

   1