[Tools][Digital Forensics and Incident Response] williballenthin/INDXParse

This commit is contained in:
pe3zx 2018-02-15 23:43:26 +07:00
parent 4effc7461a
commit 80462afb61

View File

@ -854,6 +854,10 @@ My curated list of awesome links, resources and tools
This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD(Raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
</td>
</tr>
<tr>
<td><a href="https://github.com/williballenthin/INDXParse">williballenthin/INDXParse</a></td>
<td>Tool suite for inspecting NTFS artifacts</td>
</tr>
<tr>
<td>
<a href="https://github.com/nshalabi/SysmonTools">nshalabi/SysmonTools</a>