usn-journal

Here are 4 public repositories matching this topic...

OnyxOmega / USNJournal2EventLog

Convert USN Journal Records to Event Logs

windows incident-response forensics dfir event-log sysmon threat-hunting ntfs event-logging filesystem-events refs filesystemwatcher forensics-investigations windows-11 forensics-tools dfir-tools usn-journal

Updated Jul 20, 2026
Python

xbqt / forefst

Star

Open-source ReFS forensics (Resilient File System v3.4-v3.14): file listing, super-timeline, USN + MLog journals, deleted-file recovery, snapshots plus a byte-level on-disk reference.

forensics dfir file-system digital-forensics refs forensics-investigations mlog digital-forensic-tool forensics-tool forensics-analysis windows-file-system usn-journal forensics-teaching resilient-file-system

Updated Sep 3, 2026
Python

norwytch / weeping-angel

Star

Timestomping malware detection framework + arena with RL agent baselines, based on Doctor Who.

python golang terraform incident-response dfir sysmon ntfs sigma doctor-who blue-team mitre-attack ocsf tamper-evident threat-detection detection-engineering usn-journal timestomping whoniverse

Updated Jun 15, 2026
Python

Anoop-Kumar-Sharma / WinTriage

Star

Live Windows forensic triage tool that rapidly detects anti-forensics, suspicious execution, and post-compromise activity.

prefetch forensics dfir malware-analysis bam triage forensic-analysis anti-forensics memory-forensics mft malware-detection blue-team windows-forensics forensics-tools dfir-tools usn-journal

Updated Jul 19, 2026
Python

Add this topic to your repo

To associate your repository with the usn-journal topic, visit your repo's landing page and select "manage topics."

Learn more