Forensics StartMe Updates (4/1/2024)

By Kevin Pagano
Posted on April 1, 2024


QR Code:


If people have suggestions for additions please feel free to shoot me a message on the app formerly known as Twitter (@KevinPagano3) or Mastodon.

Blog Feed

Django Faiola

Distros & VMS

Commando - Complete Mandiant Offensive VM

Forensic Tools

macosac - Forensic Artifact Collection Tool for macOS

Zircolite - A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

PE / Malware Tools

Malware Tools - Ali Hadi

Mobile Tools

UFADE - Extract files from iOS devices on Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "advanced logical backups"

SANS Posters

DFIR Fundamentals
Tags: updates StartMe
Share: Twitter Facebook LinkedIn