Raven: A suite of advanced osquery extensions for Digital Forensics and Incident Response (DFIR). Features high-performance Windows artifact parsing (Syscache, Amcache, Registry hives), LightGrep-integrated Event Log searching, fast file hashing, and cross-platform memory forensics support.
cpp osquery-extension forensics-windows-forensics-memory-forensics dfir-incident-response-threat-hunting event-logs-registry-parser lightgrep
-
Updated
May 18, 2026 - C++