Outil de triage automatisé de différents types de collectes d'artefacts.
☆18Dec 8, 2025Updated 10 months ago
Alternatives and similar repositories for PyTriage
Users that are interested in PyTriage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …☆84Feb 21, 2024Updated 2 years ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆26Apr 26, 2026Updated 6 months ago
- Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data☆23Oct 9, 2026Updated 2 weeks ago
- More Obvious Webmalware Repository☆16Dec 16, 2016Updated 9 years ago
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆17Oct 21, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12Oct 8, 2026Updated 3 weeks ago
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15May 12, 2023Updated 3 years ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Malware detection tool for Windows PE files based on DFIR ORC data☆12Mar 7, 2026Updated 7 months ago
- Setup and authentication skills for CrowdStrike MCP: streamlined connection configuration, OAuth 2.0 token management, and secure access …☆13Aug 27, 2026Updated 2 months ago
- Configurations for DFIR ORC☆30Oct 9, 2026Updated 3 weeks ago
- IR drill plateform☆23Jul 29, 2025Updated last year
- This project automates the creation of a complete security lab environment for detection engineering and attack simulation.☆14Aug 8, 2025Updated last year
- A curated reference of threat detection engineering & incident response frameworks, tools, and detection rule sources.☆13Jun 30, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆14Sep 2, 2026Updated last month
- A lightning-fast, lightweight DFIR triage and threat hunting engine for Windows Minidumps (.DMP).☆20Oct 2, 2026Updated 3 weeks ago
- Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.☆14May 7, 2026Updated 5 months ago
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- A dockerized version of the sof-elk project☆13Updated this week
- Harness the power of Splunk for your investigations☆172Oct 6, 2026Updated 3 weeks ago
- ☆17May 3, 2021Updated 5 years ago
- AI coding assistant skills for building CrowdStrike Falcon Fusion workflows: action discovery, YAML authoring, deployment, execution moni…☆28Updated this week
- Orchestration Software for Incident Response☆16Oct 9, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A harmless cryptocurrency miner simulator for detection testing. Generates realistic mining-like artifacts without consuming resources or…☆15Feb 3, 2026Updated 8 months ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Logpresso Mini and community contents for incident response☆22Oct 21, 2021Updated 5 years ago
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Jun 27, 2025Updated last year
- VMDetect is a Python based Windows VM detection and environment forensics tool that reads ACPI/SMBIOS firmware tables and system artifact…☆15Jul 14, 2026Updated 3 months ago
- ☆14Aug 24, 2026Updated 2 months ago
- This is a repository to experiment with MCP for security☆52Jan 22, 2025Updated last year
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- A cyber threat intelligence chatbot that ingested 2200+ reports from vx-underground.☆33Apr 1, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- DFIR forensics companion server + capture extension☆35Updated this week
- ARIN is Awesome ReFS Investigation tool☆11Aug 9, 2020Updated 6 years ago
- Forensics artefact collection tool for systems running Microsoft Windows☆453Oct 8, 2026Updated 3 weeks ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆114Apr 8, 2026Updated 6 months ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Guide journalisation Microsoft☆68Jun 16, 2026Updated 4 months ago