CrowdStrike / automactc
AutoMacTC: Automated Mac Forensic Triage Collector
☆537Updated 2 years ago
Alternatives and similar repositories for automactc:
Users that are interested in automactc are comparing it to the libraries listed below
- Collection of forensics artifacts location for Mac OS X and iOS☆328Updated 3 years ago
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆498Updated 2 years ago
- A framework for orchestrating forensic collection, processing and data export☆305Updated this week
- osquery extensions by Trail of Bits☆264Updated last year
- Scripts and code referenced in CrowdStrike blog posts☆332Updated 5 years ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆336Updated 2 years ago
- DFIRTrack - The Incident Response Tracking Application☆491Updated 5 months ago
- A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit☆233Updated 3 years ago
- Mapping the MITRE ATT&CK Matrix with Osquery☆787Updated last year
- A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework☆350Updated 4 years ago
- ATT&CK Remote Threat Hunting Incident Response☆200Updated 2 months ago
- Aftermath is a free macOS IR framework☆493Updated 2 months ago
- A repository for using osquery for incident detection and response☆837Updated 2 years ago
- Tools for hunting for threats.☆577Updated 4 months ago
- A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.☆603Updated 3 months ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,144Updated last year
- Parser for OSX/iOS FSEvents Logs☆243Updated 2 months ago
- Online hash checker for Virustotal and other services☆821Updated 9 months ago
- Documentation of TheHive☆396Updated last year
- CyLR - Live Response Collection Tool☆663Updated 2 years ago
- ☆275Updated last year
- Tool Analysis Result Sheet☆347Updated 7 years ago
- macOS (& ios) Artifact Parsing Tool☆808Updated 3 weeks ago
- Powershell Threat Hunting Module☆282Updated 8 years ago
- CLI tool to manage a SIFT Install☆418Updated last year
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆279Updated 3 weeks ago
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆559Updated 2 months ago
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆443Updated 3 years ago
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆241Updated 3 years ago
- A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.☆444Updated 3 months ago