MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
active 2023-08-22 → 2025-02-14 (UTC)
Complete coverage26,411 / 26,411 hourly files (100%) · 2 absent upstream2023-08-15 → 2026-08-19 (UTC)
Events
452
Pushes
18
Pull requests
7
Issues
38
Stars
285
Forks
23
Activity over time
Daily event counts in the loaded window
Line chart, 543 days from 2023-08-22 to 2025-02-14. Pushes: 18 total, peak 4 in a day. Pull requests: 7 total, peak 1 in a day. Issues: 38 total, peak 3 in a day. Comments: 79 total, peak 13 in a day. Stars: 285 total, peak 17 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| evild3ad | 80 | 18 | 3 | 40 |
| madeonukraine | 12 | 0 | 0 | 8 |
| lincion | 11 | 0 | 0 | 9 |
| antmar904 | 7 | 0 | 0 | 4 |
| wikijm | 6 | 0 | 1 | 3 |
| AndrewRathbun | 5 | 0 | 2 | 2 |
| SeattleForensics | 5 | 0 | 0 | 4 |
| mnrkbys | 3 | 0 | 0 | 2 |
| RiritoXXL | 3 | 0 | 0 | 3 |
| artafak | 2 | 0 | 1 | 1 |
| NomisRenarc | 2 | 0 | 0 | 1 |
| wagga40 | 1 | 0 | 0 | 1 |
| soloveri | 1 | 0 | 0 | 0 |
| BIitzkrieg | 1 | 0 | 0 | 0 |
| Liebershnitzel | 1 | 0 | 0 | 0 |
| digitalsleuth | 1 | 0 | 0 | 1 |
| sebastien5342 | 1 | 0 | 0 | 0 |
Recent activity
Latest issues, pull requests and releases
- Pull request#40AndrewRathbun2025-01-27 19:20
- Issue comment#46wagga402024-11-02 08:30Zircolite v2.30.1 not extracting? wait 1 day)
- Issue comment#46madeonukraine2024-10-29 11:23Zircolite v2.30.1 not extracting? wait 1 day)
- Issue#46evild3ad2024-10-29 06:04Zircolite v2.30.1 not extracting? wait 1 day)
- Issue comment#48evild3ad2024-10-29 06:02Error when running MemProcFS-Analyzer.ps1
- Issue#48evild3ad2024-10-29 06:02Error when running MemProcFS-Analyzer.ps1
- Issue comment#48lincion2024-10-29 04:16Error when running MemProcFS-Analyzer.ps1
- Issue comment#41AndrewRathbun2024-10-28 18:53RECmd: Use DFIRBatch.reb, add `--sync` similar to EvtxECmd
- Issue#47evild3ad2024-10-28 18:14First run unfinished but no error
- Issue comment#48evild3ad2024-10-28 18:13Error when running MemProcFS-Analyzer.ps1
- Issue comment#46evild3ad2024-10-28 18:08Zircolite v2.30.1 not extracting? wait 1 day)
- Issue comment#46evild3ad2024-10-28 18:05Zircolite v2.30.1 not extracting? wait 1 day)
- Issue comment#41evild3ad2024-10-28 18:03RECmd: Use DFIRBatch.reb, add `--sync` similar to EvtxECmd
- Issue#41evild3ad2024-10-28 18:03RECmd: Use DFIRBatch.reb, add `--sync` similar to EvtxECmd
- Issue comment#44evild3ad2024-10-28 18:00Multiple errors and ELK not loading
- Issue#44evild3ad2024-10-28 18:00Multiple errors and ELK not loading
- Issue comment#48lincion2024-10-27 13:03Error when running MemProcFS-Analyzer.ps1
- Issue comment#48evild3ad2024-10-27 12:56Error when running MemProcFS-Analyzer.ps1
- Issue comment#47lincion2024-10-27 12:55First run unfinished but no error
- Issue#48lincion2024-10-27 12:51Error when running MemProcFS-Analyzer.ps1
- Issue comment#47evild3ad2024-10-27 12:49First run unfinished but no error
- Issue comment#47lincion2024-10-27 12:42First run unfinished but no error
- Issue comment#47lincion2024-10-27 11:44First run unfinished but no error
- Issue comment#47lincion2024-10-27 11:32First run unfinished but no error
- Issue comment#47evild3ad2024-10-27 11:20First run unfinished but no error
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 285 stars here means stars gained during the window, not the repo's star count.