angry-bender / forensicssetup

An open source project aimed to replicate the Windows SIFT Machine and tools used during SANS Courses minus any payware software.

GNU General Public License v3.0

25 stars 4 forks source link

Tooling requests #23

Closed angry-bender closed 10 months ago

angry-bender commented 3 years ago

[x] cyber chef offline [Pri 1]
[X] Bash for WSL
[ ] Kape
[x] Yara
[x] https://www.nucleustechnologies.com/downloads/freekernelostviewer.exe (/verysilent is the switch, but opens a web browser)
[x] https://github.com/woanware/wmi-parser
[ ] Check for density scout
[ ] Check for PEScan
[ ] Check for sigcheck
[ ] https://github.com/kacos2000/WindowsTimeline/releases/tag/v.2.0.81.0 (ActivityCacheParser)
[ ] https://github.com/MarkBaggett/srum-dump.git
[ ] chainsaw https://github.com/countercept/chainsaw/releases
[ ] https://github.com/cyberdefenders/email-header-analyzer

angry-bender commented 3 years ago

WSL Complete

angry-bender commented 3 years ago

Note: at least 5 requests for Kape.

angry-bender commented 3 years ago

Re-Open for Kape

angry-bender commented 3 years ago

10 Still no response from Kroll or sans, Will impliment similar to FTK, with a question box