1 dépôt
Awesome GitHub RepositoriesForensic Timestamp Estimation
Estimating temporal markers for system artifacts by correlating multiple forensic data sources.
Distinguishing note: Nothing in the shortlist covers the estimation of historical time-entry for forensic artifacts through correlation.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Forensic Timestamp Estimation. Refine with filters or upvote what's useful.
Awesome Forensic Timestamp Estimation GitHub Repositories
Trouvez les meilleurs dépôts grâce à l'IA.Nous recherchons les dépôts les plus pertinents grâce à l'IA.
- withsecurelabs/chainsaw
WithSecureLabs/chainsaw
3,446Voir sur GitHubChainsaw is a Windows forensic analysis tool used for parsing system databases and extracting security artefacts. It functions as a forensic artefact extractor and a scanner for identifying security threats and log tampering within Windows event logs. The project distinguishes itself by implementing a Sigma rule forensic scanner that applies standardized detection logic and custom rule sets to event logs and forensic artefacts. It enables threat hunting workflows by matching event data against patterns to identify malicious activity, lateral movement, and brute force attacks. The tool's capa
Determines when files entered the shimcache by correlating file timestamps with amcache update ranges.
Rustattackblueteamchainsaw
