Awesome-Mirrors/my-infosec-awesome
1
0
Fork 0
mirror of https://github.com/pe3zx/my-infosec-awesome.git synced 2025-03-29 01:58:20 -04:00
Code Issues Packages Projects Releases Wiki Activity

Tools: Digital Forensics and Incident Response: williballenthin/process-forest

Browse Source
This commit is contained in:
pe3zx 2018-06-18 08:34:24 +00:00
parent 3af10457cb
commit 42bebcefb2
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -1097,6 +1097,10 @@ _return-to-libc techniques_
<td><a href="https://github.com/williballenthin/EVTXtract">williballenthin/EVTXtract</a></td>
<td>EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.</td>
</tr>
<tr>
<td><a href="https://github.com/williballenthin/process-forest">williballenthin/process-forest</a></td>
<td>process-forest is a tool that processes Microsoft Windows EVTX event logs that contain process accounting events and reconstructs the historical process heirarchies.</td>
</tr>
</table>
### Exploits