lateral-movement

Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.

NetExec-RS - Network Execution Tool (Rust)

Fast, multi-threaded Rust enumerator for internal network recon. Leverages WMI with encryption to fingerprint OS, CPU, and disk data across computers in a subnet for lateral movement or pivots.

Cross-platform sandbox isolation audit tool in Rust. Evaluates configuration parameters to profile system integrity, process mitigations, network/PID namespaces, SECCOMP filtering, etc. for escape pivots.