Example Usage
AV_detect Version: v2.3.0

[unknown] Non-system unknown processes (N):
- someproc.exe | cmd=C:\Path\To\someproc.exe --arg1 --arg2 ...
- othersvc.exe | svc=ServiceName(+2) | bin=C:\Program Files\Vendor\svc.exe -k group
- another.exe | img=C:\Windows\System32\another.exe


[AV] Kaspersky UI - avpui.exe
[CLOUD] Nextcloud Desktop - nextcloud.exe
[EDR] CrowdStrike Falcon Sensor - csfalconservice.exe
[RDP] Microsoft Remote Desktop Client - mstsc.exe
[VPN] WireGuard - wireguard.exe
...
See also
Bulk Extractor
Open Source Kali

Scans a disk image, file, or directory and extracts features such as email addresses, URLs, credit c…
Binwalk
Open Source Kali

Firmware analysis tool for searching, extracting, and analyzing binary images. Identifies embedded f…
horus
Open Source

An OSINT / digital forensics tool built in Python…
Volatility Workbench
Free

Free GUI front-end for Volatility 3 memory forensics framework on Windows. Simplifies memory analysi…
Ultimate-RAT-Collection
Free

For educational purposes only, exhaustive samples of 500+ classic/modern trojan builders including s…
htmldate
Open Source

Fast and robust date extraction from web pages, with Python or on the command-line…