Outil de triage automatisé de différents types de collectes d'artefacts.
☆18Dec 8, 2025Updated 8 months ago
Alternatives and similar repositories for PyTriage
Users that are interested in PyTriage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Détection d'anomalie à partir des journaux d'authentification Windows☆18Apr 16, 2021Updated 5 years ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆24Apr 26, 2026Updated 3 months ago
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15May 12, 2023Updated 3 years ago
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12May 4, 2026Updated 3 months ago
- Configurations for DFIR ORC☆29Jul 29, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- More Obvious Webmalware Repository☆16Dec 16, 2016Updated 9 years ago
- IR drill plateform☆24Jul 29, 2025Updated last year
- WISKESS automates the Windows evidence processing for Incident Response investigations. Rust version.☆17Updated this week
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- Harness the power of Splunk for your investigations☆170Oct 11, 2025Updated 9 months ago
- Orchestration Software for Incident Response☆16Jul 30, 2026Updated last week
- Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data☆21Jul 29, 2026Updated last week
- A cyber threat intelligence chatbot that ingested 2200+ reports from vx-underground.☆33Apr 1, 2024Updated 2 years ago
- ☆10Dec 18, 2018Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- ☆17May 3, 2021Updated 5 years ago
- Rust Weaponization for Red Team Engagements.☆12Nov 14, 2022Updated 3 years ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Infrastructure as code for CrowdStrike — manage detections, saved searches, lookup files, and more with a Terraform-like lifecycle.☆21Jun 29, 2026Updated last month
- Rust DFIR tool that massively parses cross-platform evidence, even deleted logs, into a lateral movement timeline and graph database.☆24May 21, 2026Updated 2 months ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- MISP to Microsoft Defender integration☆18Jul 9, 2026Updated last month
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆112Apr 8, 2026Updated 4 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Guide journalisation Microsoft☆70Jun 16, 2026Updated last month
- Process Hollowing☆12Sep 13, 2017Updated 8 years ago
- A tool for fetching DFIR and other GitHub tools.☆29Aug 2, 2025Updated last year
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- Disables all WordPress updates, including core, plugin and theme update checks.☆10Jul 18, 2021Updated 5 years ago
- Hack plugins for Kibana☆12Aug 20, 2016Updated 9 years ago
- iOS Forensics MCP Server for analyzing iPhone/iPad file systems☆18Apr 24, 2025Updated last year
- Valhuntir CLI — AI-augmented incident response platform☆91Jul 18, 2026Updated 3 weeks ago
- ☆35Oct 20, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Lists capabilities used by processes on your system as they are requested, to assist in the task of creating custom hardened profiles for…☆13Jul 4, 2026Updated last month
- ☆14Jan 6, 2022Updated 4 years ago
- A single server multiple workers distributed architecture that supports HTTP requests on the scheduler and translates them to GRPC reques…☆12Apr 11, 2022Updated 4 years ago
- Carve file metadata from NTFS index ($I30) attributes☆73May 25, 2026Updated 2 months ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆164Jul 11, 2026Updated 3 weeks ago
- Forensics artefact collection tool for systems running Microsoft Windows☆445Jul 29, 2026Updated last week
- Automatically exported from code.google.com/p/corkami☆14Mar 14, 2015Updated 11 years ago