Correlates MS Word documents for forensic digital evidence examination

Dotnet Detective is a .NET library for use in analysing disks, volumes and paritions. This library is in developent with the first focus on analysing the Master Boot Record of raw image files.

Beta versions of my software

All the CTF challenge write ups that I have completed in the past

Exploring the possibilities of using the changing frequency of the alternating current of the power grid (electrical network frequency: ENF) for determining the date and rough place of an audio (or video) recording.

Photorec sorter via symlinks with mime and exif parsing

Nextflow pipeline for ultrasensitive STR analysis

Cross Platform - Python3 Prefetch Parser - single files, directory of pf files

Go implementation of Safetext by David Jacobson

Built for incident response and forensic analysis, HashTrack generates SHA256 hashes for all running processes, checks them against VirusTotal, validates digital signatures, and exports clean reports. Interactive options help preserve API quota and streamline deep dives.

My writeups on virtual machines, hacking, and defensive challenges.

Small convince tool to lookup windows ids and return triggers them.

Chronika is a forensic analysis tool for reading and visualizing different browser histories in a chronological timeline format. Supports Chrome, Firefox, Safari, Brave, Opera, Edge, Vivaldi, Tor Browser, Chromium, LibreWolf and all browsers on Linux and macOS.

Forensics report with a detailed analysis and conclusions taken from data of a hacked VM

LMPS CTF 2017 OnSite - Casablanca

A modern Python-3-based alternative to RegRipper

Basic forensic script for hacking the world wide web. Nothing special but a tool to get the initial idea about your target.

Analyses the Windows Eventlog (System.evtx) and generates a list of Events to determine when a computer was running

Job interview preparation