├── DLLHunter.ps1 ├── MemoryHunter.ps1 ├── ProcessHunter.ps1 ├── baselines ├── BaselineDLLs.csv ├── CoreProcessesBaseline.csv └── TrustedCerts.csv └── modules ├── Check-NSRL.ps1 ├── Check-VirusTotal.ps1 ├── Freq.ps1 ├── Get-HammingDistance.ps1 ├── Submit-ToThreatGrid.ps1 ├── Volatility ├── AUTHORS.txt ├── CREDITS.txt ├── LEGAL.txt ├── LICENSE.txt ├── README.txt └── vol3.exe └── WinPmem └── winpmem_mini_x64_rc2.exe /DLLHunter.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/DLLHunter.ps1 -------------------------------------------------------------------------------- /MemoryHunter.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/MemoryHunter.ps1 -------------------------------------------------------------------------------- /ProcessHunter.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/ProcessHunter.ps1 -------------------------------------------------------------------------------- /baselines/BaselineDLLs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/baselines/BaselineDLLs.csv -------------------------------------------------------------------------------- /baselines/CoreProcessesBaseline.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/baselines/CoreProcessesBaseline.csv -------------------------------------------------------------------------------- /baselines/TrustedCerts.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/baselines/TrustedCerts.csv -------------------------------------------------------------------------------- /modules/Check-NSRL.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Check-NSRL.ps1 -------------------------------------------------------------------------------- /modules/Check-VirusTotal.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Check-VirusTotal.ps1 -------------------------------------------------------------------------------- /modules/Freq.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Freq.ps1 -------------------------------------------------------------------------------- /modules/Get-HammingDistance.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Get-HammingDistance.ps1 -------------------------------------------------------------------------------- /modules/Submit-ToThreatGrid.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Submit-ToThreatGrid.ps1 -------------------------------------------------------------------------------- /modules/Volatility/AUTHORS.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/AUTHORS.txt -------------------------------------------------------------------------------- /modules/Volatility/CREDITS.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/CREDITS.txt -------------------------------------------------------------------------------- /modules/Volatility/LEGAL.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/LEGAL.txt -------------------------------------------------------------------------------- /modules/Volatility/LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/LICENSE.txt -------------------------------------------------------------------------------- /modules/Volatility/README.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/README.txt -------------------------------------------------------------------------------- /modules/Volatility/vol3.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/Volatility/vol3.exe -------------------------------------------------------------------------------- /modules/WinPmem/winpmem_mini_x64_rc2.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lasersharkkiller/Threat-Hunter/HEAD/modules/WinPmem/winpmem_mini_x64_rc2.exe --------------------------------------------------------------------------------