From 9480e4fea3c40076fe422fe0dfc54825edcc9918 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Fri, 13 Apr 2018 17:41:51 +0700 Subject: [PATCH] [Tools][Digital Forensics and Incident Response] OSSEC --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index 819fd4a..490383c 100644 --- a/README.md +++ b/README.md @@ -916,6 +916,10 @@ My curated list of awesome links, resources and tools This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD(Raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof. + + OSSEC + Open Source HIDS SECurity + williballenthin/INDXParse Tool suite for inspecting NTFS artifacts