Alternatives and similar repositories for automactc

Users that are interested in automactc are comparing it to the libraries listed below

• pstirparo / mac4n6
  Collection of forensics artifacts location for Mac OS X and iOS
  ☆339Updated 4 years ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆333Updated last week
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆334Updated 6 years ago
• carbonblack / tau-tools
  A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit
  ☆241Updated 4 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆503Updated 3 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆343Updated 3 years ago
• orlikoski / CyLR
  CyLR - Live Response Collection Tool
  ☆693Updated 3 years ago
• dfirtrack / dfirtrack
  DFIRTrack - The Incident Response Tracking Application
  ☆526Updated last year
• teamdfir / sift-cli
  CLI tool to manage a SIFT Install
  ☆421Updated 2 years ago
• MISP / misp-training
  MISP trainings, threat intel and information sharing training materials with source code
  ☆420Updated 5 months ago
• sans-blue-team / blue-team-wiki
  Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries
  ☆456Updated 3 years ago
• swannman / ircapabilities
  Incident Response Hierarchy of Needs
  ☆467Updated 2 years ago
• GossiTheDog / ThreatHunting
  Tools for hunting for threats.
  ☆599Updated 6 months ago
• OTRF / ATTACK-Python-Client
  Python Script to access ATT&CK content available in STIX via a public TAXII server
  ☆568Updated 10 months ago
• dlcowen / FSEventsParser
  Parser for OSX/iOS FSEvents Logs
  ☆265Updated 11 months ago
• trailofbits / osquery-extensions
  osquery extensions by Trail of Bits
  ☆266Updated 2 years ago
• MalwareArchaeology / ARTHIR
  ATT&CK Remote Threat Hunting Incident Response
  ☆204Updated 11 months ago
• MarkBaggett / srum-dump
  A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.
  ☆725Updated 5 months ago
• mitre / cascade-server
  CASCADE Server
  ☆273Updated 2 years ago
• mitre-attack / tram
  Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
  ☆353Updated 4 years ago
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆287Updated last year
• Neo23x0 / munin
  Online hash checker for Virustotal and other services
  ☆836Updated 7 months ago
• swimlane / pyattck
  A Python package to interact with the Mitre ATT&CK Framework
  ☆479Updated 2 years ago
• TheHive-Project / TheHiveDocs
  Documentation of TheHive
  ☆400Updated 2 years ago
• palantir / alerting-detection-strategy-framework
  A framework for developing alerting and detection strategies for incident response.
  ☆806Updated 2 months ago
• pan-unit42 / playbook_viewer
  ☆175Updated last year
• MalwareArchaeology / ATTACK
  MITRE ATT&CK Windows Logging Cheat Sheets
  ☆345Updated 7 years ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆351Updated 5 years ago
• MISP / misp-book
  User guide of MISP
  ☆280Updated 10 months ago
• ydkhatri / mac_apt
  macOS (& ios) Artifact Parsing Tool
  ☆953Updated last week