defender-detectionhistory-parser
A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.
AI summary
Forensic parser
A Python-based tool for parsing and analyzing Windows Defender's DetectionHistory forensic artifact.
- stars
- 110
- forks
- 15
- watching
- 8
Similar projects
Found by comparing what the projects do, not just their names.
Forensic analysis toolkit
A Python-based collection of tools for gathering forensic information from Office documents
Windows forensic collector
A tool for collecting and analyzing Windows system artefacts on live systems
Forensic analyzer
A digital forensics tool for analyzing macOS and iOS systems
File system analyzer
A digital forensics tool for parsing and analyzing NTFS/FAT file systems.
Executable detector
An executable detection tool using PE parsing and machine learning signatures to identify packed samples.
Windows forensic tool
A digital forensic tool designed to gather and analyze data from Windows-based systems in incident response scenarios.
Forensic tool
A multi-threaded GUI forensic analysis tool for Linux
Forensic analyzer
A tool to aid in forensic analysis of iOS devices
Forensic collector
A tool for collecting forensic artifacts from live hosts across multiple operating systems.
Malware analyzer
A command-line tool for analyzing malware and disassembling binary files
Malware analyzer
Tool to analyze files during malware analysis and triage by extracting properties and detecting malicious indicators.
Forensic analysis tool
Analyze digital evidence by searching for files against a large public hash database and generating reports on findings.
patois/xray125
Filterer
Tool for filtering and highlighting decompiler output based on regular expressions
Malware analyzer
Automates malware analysis workflow by extracting features and indicators of compromise from malicious files using various tools and libraries.
Parser
A tool to parse JSON output from Yara Scan Service's malware analysis and extract relevant information for rule optimization.
