Tripwire

A Python-based digital forensics tool for real-time detection/snapshotting of temporary files created by malware.
Ideal for dynamic analysis of fileless malware, and monitoring suspicious file events during runtime.

---

Features:

• Monitor multiple file system paths.
• Specify file extensions to detect.
• Real-time monitoring 0.1 second delay.
• Exclude specific file types from monitoring.

---

Usage:

Executable (Recommended)

.\Tripwire.exe

Python

pip install watchdog colorama

git clone https://github.com/blwhit/Tripwire.git

python Tripwire.py

Example: