Tag Archives: Incident Handling

FullEventLogView – Event Log Viewer for Windows

FullEventLogView is a useful utility that allows to view and review windows operating system event log. Event logs provide an audit trail

Hashdeep – Cross-platform to Message Digests Files

hashdeep is a cross-platform tool for calculating hashes and message digests for any number of files, supports recursive directory structures traversal.

MobileFileSearch – Tool to Search Files Inside Mobile Device

MobileFileSearch is a tool for Windows that allows you to search files inside a mobile device (Smartphone or Tablet) plugged

Recuva – Recover Deleted Files Quickly and Easily

Recuva is a small utility for recovering files that were accidentally or intentionally deleted (lost) from a computer’s hard drives.

Bootcode_parser – Boot Record Parser For MBR, VBR, IPL

Bootcode_parser is a Python script designed to perform a quick offline analysis of the boot records used by BIOS based systems (UEFI is not supported)

NetworkOpenedFiles – List Opened Shared Files

NetworkOpenedFiles is a simple tool for Windows that displays the list of all files that are currently opened by other computers on your network.

DomainHostingView – Show Domain Hosting Information

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries,