Noriben - Portable, Simple, Malware Analysis Sandbox

Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtim...

ir-rescue - A Windows Batch Script To Comprehensively Collect Host Forensic Data

ir-rescue is a lightweight Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows s...

osquery - SQL powered operating system instrumentation, monitoring, and analytics

osquery is an operating system instrumentation framework for OS X and Linux.  The tools make low-level operating system analytics and monito...