Files, that will get Synced if you run a --sync on dfir-installer
  • PowerShell 100%
Find a file
Norman Forensics 0deae991c8 add now test
2026-11-06 17:03:36 +01:00
Configs add now test 2026-11-06 17:03:36 +01:00
Documents Add the rest 2025-12-29 14:55:25 +01:00
Installer-Configs plaso update 2026-11-06 17:01:31 +01:00
Links/Desktop Add the rest 2025-12-29 14:55:25 +01:00
Post-install-scripts Add PP Script 2026-04-10 15:40:34 +02:00
W10Privacy Contig Add the rest 2025-12-29 14:55:25 +01:00
.gitignore Update 2026-01-12 11:29:49 +01:00
calc-new-tool-list.log add vmware workstaion 26 2026-06-12 15:25:39 +02:00
calc-new-tool-list.ps1 Add FIles 2025-12-29 16:31:51 +01:00
list-of-tools.txt add vmware workstaion 26 2026-06-12 15:25:39 +02:00
README.md README.md aktualisiert 2026-11-05 13:48:19 +01:00

dfir-installer-files

Files, that will get Synced if you run a --sync on dfir-installer

Change back to Codeberg.org, due to GitHub kindly locked my account and deleted all my github repos. Wrong choice to go back to GitHub. I will stay at Codeberg.org and recommend every developer to do so.

FYI Changed some tool names:

--- New ---
bulk_extractor-rec
Cain
DFIRPowerShellScripts
EVTXtract
Exterro FTK Imager 4
ExtractUsnJrnl
Grassmarlin
Indx2Csv
JoakimSchichtToolsOutdated
LogFileParser-Git
MakeContainer
MakeImage
MetaDiver
Mft2Csv
MicrosoftExtractorSuite
RawCopy
Registry-Write-Block
Registry-Write-Block-exe
ROADtools
RunAsTI
Secure2Csv
ShimCacheParser
UsnJrnl2Csv
VMware Workstation17
VSS_Carver

--- Removed ---
Event Log Explorer_Forensic
Event Log Explorer_Standard
Exterro FTK Imager
JoakimSchichtTools
Metasploit Framework
VMware Workstation
VSS_Carver.pyinfected
EDD
KAPE-Big