To all my Windows DFIR friends out there! 🔥
Have you ever wished for a single Windows forensic artifact parsing tool that could parse just about anything, while being blazing fast, stable, well-organized, memory-safe, standalone, and cross-platform?
Well, I certainly have!
So, I spent the past month obsessively building one! 😎
Say hello to "Juntei" (准胝)! 🎉
https://t.co/3Xf7ZbXYyo
https://t.co/ntazHaljHw
Think of it as "Hayabusa, but for non-EVTX artifacts!"
It can scan regular directories, VHDX, and E01 files directly, without even having to mount them.
I just ran a performance test on 30 Windows triage data collections (125 GB total), and my MacBook Pro M4 cranked out 40 GB of parsed data in less than 5 minutes! 🚀
It's trivial to use. Just run the "auto-parse" command, and Juntei will automatically parse all supported artifacts for you.
Want a super timeline? No problem! Simply run "super-timeline" against the parsed output directory, and you're good to go!
But here's a little warning! ⚠️
The "SUPER" in super timeline is no joke! 😂
At the moment, the generated timelines can be about 5 times larger than the parsed data directory!
So here's my recommendation: Run Hayabusa first to pinpoint when an incident occurred, then filter your timeline to the relevant time period.
By the way, JSONL super timelines are generated in a Timesketch-compatible format by default, so you can import them directly!
For analyzing CSV output, I highly recommend IRFlow Timeline!
I've created dedicated templates to ensure the different field types are correctly recognized and displayed.
https://t.co/iczzGaD7NV (Wait for v2 to be released, or use one of my forks!)
macOS:
https://t.co/wh51vxwcOU
Windows:
https://t.co/Vav5rnVJ2v
Linux:
https://t.co/yAg9aBk4sp
I hope you enjoy using it! 🔥
If you find Juntei useful, please help spread the word to your fellow DFIR friends!
And don't forget to give us a star on GitHub! ⭐ 🙏
Enjoy! 🤗
@kurobane__@nqpxb7 I was laid-off by my company and I have to my rent as well… so why I shouldn’t rely on govt. welfare scheme until I get a new job? What’s wrong in getting a welfare?
I worked hard 5 days a week for 6 yrs just like you are doing but still got terminated.
@GriffynYang@RajeshwariRW Japanese don’t like Indians 🇮🇳 I can vouch for this as I am Indian and live in Japan. They see us as a low class worker only and consider us smelly. So stop this bullshit & bdw ppl loved us and treated well when we visited China for 15 days trip.
@gaziozmn1 Its bullshit story! Why this post says a Paid Partnership then? Only the fools will believe that it has anything to do with polite Japanese users. What a crap!
@Biz_Kawashima But I feel sorry for the victims whose private information have been leaked by the negligence of GMO. Already known vulnerability from 2 years but ignored to patched is what makes heavily criticized by public and users of GMO.
@agitadashi If this would have been the case in US or some other countries…. then GMO would have been stuck with the class action lawsuit and would be fined hefty damages in billions as penalty for negligence & not keeping their user’s data safe.
@tommy199777_ Sounds like a great PR stunt after controversies related to GMO is piling up due to their own negligence. Should have done more to protect the rights of the victims whose PII data has been leaked. A law-suit action is necessary.
@Assassinationko GMO should have fixed the year old vulnerability… that’s called trying. Companies in Japan don’t care about their customers. 90 degree bow doesn’t matter to the people whose PII have been leaked due to carelessness. Just bcoz there’s no law for fines, org. get a free ticket.
Binance just published how $6.34 billion walked out the door.
June: an engineer searches for a popular AI coding tool, clicks a search result, and installs a tampered homebrew. Binance catches it, replaces the laptop, rotates the credentials. the attackers now know who works on the wallet team.
September: another engineer gets a job offer on a real job-hunting site. first-round interview with “HR” over live video. “HR” shares their social media, personal photos and videos included, so he trusts them. second round is with the “CEO” of a company that doesn’t exist. at the end of the call he’s asked to download a take-home “assignment” onto his work laptop.
the assignment quietly swaps out pyenv for a malicious copy. No antivirus flags it.
october 20: the attacker uses binance’s own internal AI tool to get into two more engineers’ machines. One of them has a container deployment token sitting on his laptop.
october 29: container deployed. Signing service reached. $6.34 billion moved.
Binance shut off withdrawals. the money kept moving anyway, because the attacker had already given their own smart contract permission over a hot wallet, on-chain. binance’s off switch didn’t reach that far.
then they tried to revoke the permission. the wallet uses MPC, so there’s no single private key to sign the revoke with. they had to build a revoke procedure on the spot while funds were still leaving.
last stolen ETH went through at 23:56 UTC. almost four hours after the first transfer.
Phew!
Download these before the internet gets restricted during the cyber pandemic
https://t.co/0obmfoXwSx
https://t.co/JQuqTVoF3P
https://t.co/g823nlqp8Z
https://t.co/NePA6zEq4Y
https://t.co/AqMTvn4brf
https://t.co/cqRUdmRmEQ
https://t.co/OqPnPF9wQ8
https://t.co/ii8iOaAK7n
https://t.co/iQ2s3bqwfv
https://t.co/1AeR76Fpe9
https://t.co/E89I36nv4r (figure out if u need raw, papers, pdf version etc based on storage)
Genome models
• Evo 2 (40B): https://t.co/dnoPeJ0kva
• Evo 2 (7B): https://t.co/aY91IdBvJx
• Genos-1.2B: https://t.co/n8hjn5QlLw
• Genos-10B: https://t.co/SyKDJ2Vlpe
Pathology models
• OpenMidnight (Sophont): https://t.co/waqaIYcBhO
• GenBio-PathFM: https://t.co/USrwuVfbto
Protein design
• BoltzGen: https://t.co/zuHMiHAgsW
• Pinal (text-to-protein): https://t.co/fUDVhXEdg1
https://t.co/Gc0nxin0VR
orcarouter/Qwen3.8-27B-Uncensored-GGUF
huggingface/carbon
ESM-2 + ESMFold
OpenFold
PubMed Central Open Access
https://t.co/ffRoYQ1AJI
https://t.co/qaKGMAEorC
https://t.co/XSwqPaAAs1
https://t.co/AiCd1fmhzY
https://t.co/yIiOkzYHSV
https://t.co/cB3UqfxrJO
Also buy a hack rf one
@noracoayabe Let China do whatever they want to do with their citizens. Bt see below:
The Suppression of Left-Wing Discretion (Pre-WWII)
The Battle of Okinawa (1945)
The Kantō Earthquake Korean & Socialist Massacres (1923)
Historical Rebel Suppressions (19th Century)
I'll leave it here.
@noracoayabe And you dont know what values means. You have no values at all. Stop you uneducated. And not just me… many japanese are also leaving their own country. But before that return my pension money that are being used towards your elderly here. U go back to your country - China 😝😝
@noracoayabe You yourself are shitty. Asking for a sympathy for your atami when there’s a huge disaster happened in Nepal. Shame on you. You and your govt. has been discriminating people since WWII. I know what happened in Nanjing in China. I dont believe I am talking to a useless person.🤮🤮
@noracoayabe And you should go complain to your Govt. not here! You ppl just know how to spread hate on X. Every action has its own repercussions. One day with the amount of hate being spread against Gaijins… even they will not come to save you during any disaster time. So, behave!