Tools for Incident Response and Malware Analysis
☆11Feb 9, 2025Updated last year
Alternatives and similar repositories for DFIR-Malware-Analysis
Users that are interested in DFIR-Malware-Analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 7 months ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆16Jul 6, 2026Updated last month
- A GUI tool used to parse Sysmon log and display as process tree☆18Mar 21, 2026Updated 4 months ago
- Volume Shadow Copy Explorer☆15Nov 23, 2025Updated 8 months ago
- AI modular structure that provides automation-based attack and penetration☆14May 10, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Identifies metadata of .NET binary files.☆21Apr 3, 2024Updated 2 years ago
- ☆23Apr 1, 2026Updated 4 months ago
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 3 weeks ago
- Go bindings for libnotify -- Create and update OS notifications in linux☆13Jul 22, 2024Updated 2 years ago
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 2 months ago
- CyberChef update scripts in PowerShell & Bash☆18Apr 22, 2024Updated 2 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- Linux Programming Interface Kerrisk☆12Jan 11, 2019Updated 7 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆31Jul 28, 2026Updated 2 weeks ago
- Triage automation tool☆22Jul 27, 2026Updated 2 weeks ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆164Apr 6, 2025Updated last year
- Forensic Browser History Analyzer - Cross-platform browser history extractor (Chrome, Firefox, IE/Edge, Brave, Opera, Vivaldi)☆37Updated this week
- A tool for fetching DFIR and other GitHub tools.☆29Aug 2, 2025Updated last year
- VTC - Velociraptor Timeline Creator☆19May 15, 2024Updated 2 years ago
- Comprehensive adversary emulation tool for security testing on Google Cloud Platform (GCP) environments.☆14Jun 14, 2024Updated 2 years ago
- Dissectify — macOS Forensic Analysis Toolkit. Collection health validation, 61 artifact parsers, XLSX export, and Velociraptor collector …☆50Jun 1, 2026Updated 2 months ago
- ☆21Jul 13, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆177Aug 25, 2023Updated 2 years ago
- Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract text…☆12Aug 3, 2026Updated last week
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- ioc2rpz webgui☆17Aug 6, 2026Updated last week
- ☆35Dec 6, 2023Updated 2 years ago
- A list of generic Red Team "backlog" items that most Red Teams would do to prep for operations or to work on during down time☆16Jul 28, 2025Updated last year
- Helm chart deploys Latest Apache NiFi in a Kubernetes cluster☆16Nov 9, 2025Updated 9 months ago
- ☆31Oct 18, 2025Updated 9 months ago
- Python script for carving Bitlocker VMK keys☆26Feb 4, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows EVTX log analysis for DFIR — fast parsing, ATT&CK mapping, IOC extraction, and Sentinel anomaly detection. Normal + Juggernaut Mo…☆56Updated this week
- Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.☆21May 13, 2026Updated 3 months ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆25Jul 20, 2026Updated 3 weeks ago
- Detects and reports malicious clipboard content (PowerShell, mshta, etc.) on any page, with user alerts.☆16Oct 5, 2025Updated 10 months ago
- Incident Response automation scripts☆16Sep 5, 2025Updated 11 months ago
- This command-line interface (CLI) application provides a robust and reliable way to download media from your Snapchat memories export fil…☆21Nov 27, 2025Updated 8 months ago
- VANET using OMNET++, SUMO, Open Street Map, Veins, Inet☆11May 14, 2024Updated 2 years ago