Alternatives and similar repositories for CDIR

Users that are interested in CDIR are comparing it to the libraries listed below

• CyberDefenseInstitute / CDIR-A
  CDIR Analyzer - parsers for data collected by CDIR Collector
  ☆18Updated 2 years ago
• JPCERTCC / MalConfScan-with-Cuckoo
  Cuckoo Sandbox plugin for extracts configuration data of known malware
  ☆135Updated last year
• Yamato-Security / RustyBlue
  RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
  ☆72Updated 3 years ago
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆493Updated last year
• nict-csl / exist
  EXIST is a web application for aggregating and analyzing cyber threat intelligence.
  ☆152Updated 2 years ago
• Recruit-CSIRT / LinuxTriage
  R-CSIRT Linux Triage tool
  ☆39Updated 7 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆463Updated 2 months ago
• JPCERTCC / ToolAnalysisResultSheet_jp
  分析ツール結果シート
  ☆19Updated 7 years ago
• Recruit-CSIRT / MacRipper
  A DFIR tool to analyze artifacts on macOS
  ☆33Updated 4 years ago
• AllsafeCyberSecurity / malware-analysis-at-scale-defeating-emotet-by-ghidra
  Ghidra Script for automated analysis of EMOTET
  ☆17Updated 4 years ago
• JPCERTCC / SysmonSearch
  Investigate suspicious activity by visualizing Sysmon's event log
  ☆425Updated last year
• msuhanov / dfir_ntfs
  An NTFS/FAT parser for digital forensics & incident response
  ☆213Updated 3 weeks ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 5 years ago
• nao-sec / ektotal
  [BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack
  ☆107Updated 2 years ago
• davidpany / WMI_Forensics
  ☆306Updated 5 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆141Updated 5 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆199Updated 7 months ago
• mnrkbys / vss_carver
  Carves and recreates VSS catalog and store from Windows disk image.
  ☆100Updated 2 years ago
• dgunter / evtxtoelk
  A lightweight tool to load Windows Event Log evtx files into Elasticsearch.
  ☆119Updated 4 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆265Updated 6 years ago
• christophetd / mindmaps
  Mindmaps for threat hunting - work in progress.
  ☆151Updated 3 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆141Updated 3 years ago
• mandiant / win10_volatility
  An advanced memory forensics framework
  ☆96Updated 6 years ago
• msuhanov / yarp
  Yet another registry parser
  ☆136Updated 3 years ago
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆79Updated last year
• JPCERTCC / impfuzzy
  Fuzzy Hash calculated from import API of PE files
  ☆90Updated 3 years ago
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆62Updated last year
• MAECProject / schemas
  MAEC Schemas and Schema Development
  ☆88Updated 5 years ago
• andreafortuna / autotimeliner
  Automagically extract forensic timeline from volatile memory dump
  ☆132Updated last year
• nbeede / BoomBox
  Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
  ☆238Updated 2 years ago