Alternatives and similar repositories for investigations:

Users that are interested in investigations are comparing it to the libraries listed below

• mvt-project / mvt
  MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
  ☆10,771Updated 3 weeks ago
• curated-intel / Ukraine-Cyber-Operations
  Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for…
  ☆921Updated last year
• samyk / slipstream
  NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewa…
  ☆1,916Updated 2 years ago
• vanhoefm / fragattacks
  ☆1,262Updated last month
• cisagov / CHIRP
  A DFIR tool written in Python.
  ☆1,046Updated 3 years ago
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,074Updated this week
• NCSC-NL / log4shell
  Operational information regarding the log4shell vulnerabilities in the Log4j logging library.
  ☆1,897Updated 2 years ago
• cisagov / log4j-affected-db
  A community sourced list of log4j-affected software
  ☆1,120Updated 2 years ago
• topotam / PetitPotam
  PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
  ☆1,919Updated 7 months ago
• AssoEchap / stalkerware-indicators
  Indicators of stalkerware apps
  ☆289Updated last week
• positive-security / send-my
  Upload arbitrary data via Apple's Find My network.
  ☆1,824Updated last year
• VirusTotal / vt-cli
  VirusTotal Command Line Interface
  ☆885Updated 7 months ago
• WithSecureLabs / chainsaw
  Rapidly Search and Hunt through Windows Forensic Artefacts
  ☆3,065Updated 2 months ago
• jonaslejon / malicious-pdf
  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
  ☆2,956Updated this week
• Neo23x0 / Raccine
  A Simple Ransomware Vaccine
  ☆957Updated last year
• s0md3v / Smap
  a drop-in replacement for Nmap powered by shodan.io
  ☆2,974Updated 2 weeks ago
• timb-machine / linux-malware
  Tracking interesting Linux (and UNIX) malware. Send PRs
  ☆1,169Updated 3 weeks ago
• capt-meelo / Beaconator
  A beacon generator using Cobalt Strike and a variety of tools.
  ☆450Updated 3 years ago
• GuidoBartoli / sherloq
  An open-source digital image forensic toolset
  ☆2,764Updated 4 months ago
• Te-k / harpoon
  CLI tool for open source and threat intelligence
  ☆1,196Updated 2 weeks ago
• pirxthepilot / wtfis
  Passive hostname, domain and IP lookup tool for non-robots
  ☆899Updated 4 months ago
• wssheldon / osintui
  OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys
  ☆1,009Updated 5 months ago
• EFForg / crocodilehunter
  Taking one back for Steve Irwin 　 　 (๑•̀ㅂ•́)و
  ☆985Updated 2 years ago
• cisagov / RedEye
  RedEye is a visual analytic tool supporting Red & Blue Team operations
  ☆2,701Updated last year
• utkusen / urlhunter
  a recon tool that allows searching on URLs that are exposed via shortener services
  ☆1,566Updated last month
• GossiTheDog / SystemNightmare
  Gives you instant SYSTEM command prompt on all supported and legacy versions of Windows
  ☆379Updated 3 years ago
• MaximeBeasse / KeyDecoder
  KeyDecoder app lets you use your smartphone or tablet to decode your mechanical keys in seconds.
  ☆3,109Updated last year
• TheParmak / conti-leaks-englished
  Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.
  ☆610Updated 2 years ago
• bee-san / Name-That-Hash
  🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes wi…
  ☆1,531Updated last week
• sowdust / tafferugli
  Tafferugli is a Twitter Analysis Framework
  ☆361Updated 2 years ago