cargo / bam-forensic

bam-forensic

cargo

Windows Background Activity Moderator (BAM/DAM) forensic analyzer — reports last-execution times per executable per user SID from the SYSTEM hive, with graded findings (masquerading, staging-directory execution), plus the bam4n6 CLI.

0 audits github.com/SecurityRonin/bam-forensic

Audits

No audits for this package yet.