Skip to content

Releases: FreeDurok/Filefix-Hunter

v0.1.0-alpha

23 Aug 14:28

Choose a tag to compare

📦 filefix-hunter v0.1.0-alpha

filefix-hunter is a Rust-based forensic utility for early-stage DFIR investigations on Windows systems.
This is an alpha release, intended for initial testing and feedback.

🚀 Features

  • Scans all HKEY_USERS<SID>\Software\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths.
  • Detects suspicious commands, LOLBIN traces, and common exploitation patterns (Mimikatz, encoded PowerShell, etc.).
  • Highlights suspicious entries directly in the console (red) vs safe (yellow).
  • Exports detailed findings to JSON or CSV, including matched indicators.

⚠️ Notes

  • This alpha version may still have limited rule sets or minor output quirks.
  • Designed primarily for analysts performing Windows registry triage in incident response.