Releases: FreeDurok/Filefix-Hunter
Releases · FreeDurok/Filefix-Hunter
v0.1.0-alpha
📦 filefix-hunter v0.1.0-alpha
filefix-hunter is a Rust-based forensic utility for early-stage DFIR investigations on Windows systems.
This is an alpha release, intended for initial testing and feedback.
🚀 Features
- Scans all HKEY_USERS<SID>\Software\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths.
- Detects suspicious commands, LOLBIN traces, and common exploitation patterns (Mimikatz, encoded PowerShell, etc.).
- Highlights suspicious entries directly in the console (red) vs safe (yellow).
- Exports detailed findings to JSON or CSV, including matched indicators.
⚠️ Notes
- This alpha version may still have limited rule sets or minor output quirks.
- Designed primarily for analysts performing Windows registry triage in incident response.