TCHunt-ng
File analyzer
A tool that uses various tests to identify and analyze encrypted files on a filesystem.
Reveal encrypted files stored on a filesystem.
52 stars
5 watching
8 forks
Language: C
last commit: over 6 years ago
Linked from 1 awesome list
cryptographyencryptionforensicssecuritytruecrypt
shadawck/awesome-anti-forensicRelated projects:
| Repository | Description | Stars |
|---|---|---|
 nachoparker/dutree | A tool to analyze and visualize file system usage in various formats | 827 |
 adoreste/truehunter | Detects encrypted files using a fast and memory efficient approach without external dependencies. | 30 |
 nccgroup/featherduster | An automated cryptanalysis tool with modular components for breaking various types of encryption | 1,095 |
 diablohorn/yara4pentesters | A tool to identify files containing sensitive information using YARA rules | 125 |
 pandora-analysis/pandora | An analysis framework to detect suspicious files and provide analysis results | 254 |
 k-sec-tools/yarafilecheckerlib | A YARA-based library to analyze files and archives for potential maliciousness | 2 |
 lprat/static_file_analysis | Analyzes files to detect malware and extract embedded content | 49 |
 flatt-security/shisho | A tool that analyzes code for security vulnerabilities and provides feedback to developers | 369 |
 horsicq/nauz-file-detector | Identifies and determines properties of executable files using various analysis techniques | 531 |
 jpcertcc/aa-tools | A collection of tools and scripts for analyzing malware, reverse engineering malware, and decrypting encrypted data | 455 |
 thewhiteninja/ntfstool | A forensic tool for analyzing NTFS volumes and decrypting encrypted files | 485 |
 ahmedkhlief/apt-hunter | A tool to analyze Windows event logs for signs of APT attacks and malware activity. | 1,265 |
| jpcertcc/toolanalysisresultsheet | An HTML-based tool for analyzing and visualizing log data from Windows execution of malicious tools to detect lateral movement. | 345 |
 fuzzinglabs/sierra-analyzer | Analyzes and decomposes binary files used by the Sierra blockchain network | 10 |
 hasherezade/hollows_hunter | Analyzes running processes to detect and dump malicious code | 2,047 |