Add MemProcFS

packages/dokan.vm/dokan.vm.nuspec

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>dokan.vm</id>
+    <version>2.0.6.20231207</version>
+    <authors>kacos2000</authors>
+    <description>Dokan simplifies the creation of custom file systems on Windows without the complexity of developing kernel-level drivers, offering an accessible solution for file system development, similar to FUSE on Linux.</description>
+    <dependencies>
+      <dependency id="common.vm" />
+    </dependencies>
+  </metadata>
+</package>

packages/dokan.vm/tools/chocolateyinstall.ps1

@@ -0,0 +1,46 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Dokan'
+$category = 'Utilities'
+
+# Bypass linter
+$category
+
+$exeUrl = 'https://github.com/dokan-dev/dokany/releases/download/v2.0.6.1000/Dokan_x64.msi'
+$exeSha256 = '1de58167e28d0c4be6af17abfe5ce9d8dc0bff032f900b225e23b79147b0fff2'
+
+$fileType = 'MSI'
+$silentArgs = '/qn /norestart'
+
+try {
+    $toolDir = Join-Path ${Env:RAW_TOOLS_DIR} $toolName
+    $installedPath = Join-Path ${Env:ProgramFiles} $toolName
+    $installerName = Split-Path -Path $exeUrl -Leaf
+    $installerPath = Join-Path $toolDir $installerName
+
+
+    $packageArgs = @{
+        packageName   = ${Env:ChocolateyPackageName}
+        fileFullPath  = $installerPath
+        url           = $exeUrl
+        checksum      = $exeSha256
+        checksumType  = "sha256"
+    }
+
+    Get-ChocolateyWebFile @packageArgs
+    VM-Assert-Path $installerPath
+
+    # Install tool via native installer
+    $packageArgs = @{
+        packageName   = ${Env:ChocolateyPackageName}
+        fileType      = $fileType
+        file          = $installerPath
+        silentArgs    = $silentArgs
+        softwareName  = $toolName
+    }
+    Install-ChocolateyInstallPackage @packageArgs
+    VM-Assert-Path $installedPath
+} catch {
+    VM-Write-Log-Exception $_
+}

packages/dokan.vm/tools/chocolateyuninstall.ps1

@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'Dokan'
+$category = 'Utilities'
+
+VM-Uninstall $toolName $category

packages/memprocfs.vm/memprocfs.vm.nuspec

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2015/06/nuspec.xsd">
+  <metadata>
+    <id>memprocfs.vm</id>
+    <version>5.8.17</version>
+    <authors>Ulf Frisk</authors>
+    <description>MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system.</description>
+    <dependencies>
+      <dependency id="common.vm" />
+      <dependency id="dokan.vm" />
+    </dependencies>
+  </metadata>
+</package>

packages/memprocfs.vm/tools/chocolateyinstall.ps1

@@ -0,0 +1,10 @@
+$ErrorActionPreference = 'Stop'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'MemProcFS'
+$category = 'Forensic'
+
+$zipUrl = 'https://github.com/ufrisk/MemProcFS/releases/download/v5_archive/MemProcFS_files_and_binaries_v5.8.17-win_x64-20231128.zip'
+$zipSha256 = '22196c8fdd09db229ed8ee649e56b406a5f8dd43f7728cfe13cd1618aaef7085'
+
+VM-Install-From-Zip $toolName $category $zipUrl -zipSha256 $zipSha256 -consoleApp $true -innerFolder $false

packages/memprocfs.vm/tools/chocolateyuninstall.ps1

@@ -0,0 +1,7 @@
+$ErrorActionPreference = 'Continue'
+Import-Module vm.common -Force -DisableNameChecking
+
+$toolName = 'MemProcFS'
+$category = 'Forensic'
+
+VM-Uninstall $toolName $category