The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.
☆44Sep 17, 2020Updated 6 years ago
Alternatives and similar repositories for CCXDigger
Users that are interested in CCXDigger are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A small tool to easily mount APFS image on macOS for forensics.☆17Jul 30, 2020Updated 6 years ago
- Yara Based Detection Engine for web browsers☆50Sep 5, 2021Updated 5 years ago
- A collection of infosec related scripts and information.☆54Oct 2, 2024Updated 2 years ago
- Turn domain expertise into AI-accessible MCP servers☆17Oct 28, 2026Updated last week
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Set of utilities for getting information about Windows Events☆15Jun 5, 2018Updated 8 years ago
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 2 weeks ago
- Example Java implementations of producers☆10Feb 16, 2014Updated 12 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs…☆40Apr 27, 2025Updated last year
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- macOS Artifact Intelligence Tool☆13Apr 30, 2019Updated 7 years ago
- An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree…☆60Jan 30, 2018Updated 8 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Documentation for connecting Microsoft Sentinel and the ACSC CTIS platform☆11Jan 23, 2024Updated 2 years ago
- Golang Parser for Microsoft Event Logs☆109Oct 7, 2026Updated last month
- Signature engine for all your logs☆172Nov 13, 2023Updated 2 years ago
- Auxiliary scripts for Incident Response with ELK☆11Oct 7, 2015Updated 11 years ago
- Triage automation for suspect URLs☆13Jul 23, 2019Updated 7 years ago
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- A self-verifying autonomous DFIR analyst: read-only MCP forensic tools plus an adversarial Investigator/Skeptic self-correction loop.☆28Jun 10, 2026Updated 4 months ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago
- Scripts to integrate DFIR-IRIS, MISP and TimeSketch☆37Feb 2, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- MAL-CL (Malicious Command-Line)☆332Jan 10, 2023Updated 3 years ago
- ☆34Oct 25, 2021Updated 5 years ago
- This repository includes a mapping table and a reference process that allows converting between STIX 2.1 Course of Action objects that ma…☆16Aug 24, 2022Updated 4 years ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- ☆22Aug 26, 2021Updated 5 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆96Sep 7, 2023Updated 3 years ago
- Carbonblack Live Response from the comfort of your own terminal☆20Jan 20, 2016Updated 10 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bash script for performing the logical acquisition of Apple Silicon Mac☆18Jun 21, 2024Updated 2 years ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆19Jan 10, 2024Updated 2 years ago
- Tools for parsing Forensic images☆41Dec 14, 2018Updated 7 years ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- A small util to brute-force prefetch hashes☆78Jun 24, 2022Updated 4 years ago
- YARA rule analyzer to improve rule quality and performance☆118Jun 4, 2026Updated 5 months ago
- Notes on responding to security breaches relating to Azure AD☆130Mar 14, 2022Updated 4 years ago