Posts

Showing posts with the label Forensic

Turbinia - Automation Too Scaling Of Digital Forensics Tools

Image
Turbinia is an open-source framework for deploying, managing, as well as running distributed forensic workloads. It is intended to automate running of mutual forensic processing tools (i.e. Plaso, TSK, strings, etc) to attention amongst processing evidence inwards the Cloud, scaling the processing of large amounts of evidence, as well as decreasing reply fourth dimension yesteryear parallelizing processing where possible. How it works Turbinia is composed of dissimilar components for the client, server as well as the workers. These components tin dismiss live on run inwards the Cloud, on local machines, or as a hybrid of both. The Turbinia customer makes requests to procedure evidence to the Turbinia server. The Turbinia server creates logical jobs from these incoming user requests, which creates as well as schedules forensic processing tasks to live on run yesteryear the workers. The evidence to live on processed volition live on dissever upwards yesteryear the jobs when ...

Winpwn - Automation For Internal Windows Penetrationtest

Image
In many past times internal penetration tests I frequently had problems alongside the existing Powershell Recon / Exploitation scripts due to missing proxy support. For this argue I wrote my ain script alongside automatic proxy recognition in addition to integration. The script is to a greater extent than frequently than non based on well-known large other offensive safety Powershell projects. I exclusively charge them 1 after the other into RAM via IEX Downloadstring in addition to partially automate the execution to salve time. Yes it is non a C# in addition to it may hold out flagged past times antivirus solutions. Windows Defender for illustration blocks merely about of the known scripts/functions. Different local recon modules, domain recon modules, pivilege escalation in addition to exploitation modules. Any suggestions, feedback in addition to comments are welcome! Just Import the Modules alongside "Import-Module .\WinPwn_v0.7.ps1" or alongside iex (new-object n...

Flashmingo - Automatic Analysis Of Swf Files Based On Or As Well As Hence Heuristics

Image
Automatic Analysis Of SWF Files Based On Some Heuristics. Extensible Via Plugins. Install Install the Python (2.7) packages listed inwards requirements.txt . You tin usage the next command: pip install -r requirements.txt If you lot desire to usage the decompilation functionality you lot postulate to install Jython . Ubuntu/Debian users tin outcome apt install jython Clone the projection or download the null file. What FLASHMINGO is an analysis framework for SWF files. The tool automatically triages suspicious Flash files as well as guides the farther analysis process, freeing precious resources inwards your team. You tin easily contain FLASHMINGO’s analysis modules into your workflow. Why To this 24-hour interval forensic investigators as well as malware analysts must bargain amongst suspicious SWF files. If history repeats itself the safety threat may fifty-fifty dice bigger beyond Flash’s terminate of life inwards 2020. Systems volition proceed to back upward a l...