Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
Johnng007 authored Jun 29, 2022
1 parent 2a189f6 commit 3376f04
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ ___________ .__ __

Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigators and Incidence responders in carrying out a quick live forensic investigation.
<p>It achieves this by gathering different system information for further review for anomalous behaviour or unexpected data entry, it also looks out for unusual files or activities and points it out to the investigator.</p>
<p> The latest version now analysis Event Logs, it querries the event logs for certain log IDs that might point to an unusual activity or compromise. </p>
<p>It is paramount to note that this script has no inbuilt intelligence its left for the investigator to analyse the output and decide on a conclusion or decide on carrying out more deeper investigation.</p>

## Optional Dependencies
Expand Down Expand Up @@ -164,6 +165,12 @@ Forensicator can now encrypt the Artifact with a unique randomely generated key
4. SCHEDULED TASKS AND STATE
5. SERVICES
6. PERSISTANCE IN REGISTRY

========================================
EVENTLOG ANALYSIS
========================================
1. USER RELATED ACTIVITES.
2.

=================================
OTHER CHECKS
Expand Down Expand Up @@ -198,6 +205,10 @@ Forensicator can now encrypt the Artifact with a unique randomely generated key

##ChangeLog
```bash
v3.2.1 29/06/2022
Updated The UI
Added EventLog Analysis

v3.1.0 27/05/2022
Moved all the Binary Helpers to a folder.
Added an inbuilt powershell based browser history extractor.
Expand Down

0 comments on commit 3376f04

Please sign in to comment.