Category Archives: Computer Forensics
Hindsight – Web browser Forensics for Google Chrome
Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser
PEview – Tool to Investigate PE Files
PEview provides a quick and easy way to view the structure and content of 32-bit Portable Executable (PE) and Component Object File Format (COFF) files.
Yeti – Your Everyday Threat Intelligence
Yeti is a platform meant to organize observables, indicators of compromise, TTPs, and knowledge on threats in a single, unified repository. the platform will also automatically enrich observables (e.g. resolve domains, geolocate IPs) so that you don’t have to. Yeti
AppNetworkCounter – List Application Network Usage
AppNetworkCounter is a simple tool for Windows that counts and displays the number of TCP/UDP bytes and packets sent and received by every application on
TurnedOnTimesView – List PC Running Time Ranges
TurnedOnTimesView is a simple tool that analyses the event log of Windows operating system, and detects the time ranges that your computer was turned on.
EtherApe – Graphical Network Monitor
EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically.
Cyber Triage – Practical Endpoint Response
Cyber Triage is an Incident response framework that will investigate remote systems and endpoint by pushing a collection of tools over the network.
