Alternatives and similar repositories for CDIR:

Users that are interested in CDIR are comparing it to the libraries listed below

• CyberDefenseInstitute / CDIR-A
  CDIR Analyzer - parsers for data collected by CDIR Collector
  ☆18Updated last year
• JPCERTCC / MalConfScan-with-Cuckoo
  Cuckoo Sandbox plugin for extracts configuration data of known malware
  ☆135Updated last year
• Yamato-Security / RustyBlue
  RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.
  ☆70Updated 2 years ago
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆486Updated last year
• nict-csl / exist
  EXIST is a web application for aggregating and analyzing cyber threat intelligence.
  ☆151Updated 2 years ago
• JPCERTCC / SysmonSearch
  Investigate suspicious activity by visualizing Sysmon's event log
  ☆419Updated last year
• Recruit-CSIRT / MacRipper
  A DFIR tool to analyze artifacts on macOS
  ☆32Updated 4 years ago
• Recruit-CSIRT / LinuxTriage
  R-CSIRT Linux Triage tool
  ☆38Updated 6 years ago
• nao-sec / ektotal
  [BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack
  ☆108Updated 2 years ago
• JPCERTCC / ToolAnalysisResultSheet_jp
  分析ツール結果シート
  ☆18Updated 7 years ago
• JPCERTCC / log-analysis-training
  ログ分析トレーニング用コンテンツ
  ☆89Updated 4 years ago
• JPCERTCC / aa-tools
  Artifact analysis tools by JPCERT/CC Analysis Center
  ☆458Updated 7 months ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆259Updated 6 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• JPCERTCC / YAMA
  Yet Another Memory Analyzer for malware detection
  ☆178Updated 8 months ago
• davidpany / WMI_Forensics
  ☆297Updated 4 years ago
• AllsafeCyberSecurity / malware-analysis-at-scale-defeating-emotet-by-ghidra
  Ghidra Script for automated analysis of EMOTET
  ☆17Updated 4 years ago
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆136Updated 4 years ago
• JPCERTCC / impfuzzy
  Fuzzy Hash calculated from import API of PE files
  ☆87Updated 2 years ago
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆106Updated 2 months ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆192Updated 4 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆236Updated 3 years ago
• mnrkbys / vss_carver
  Carves and recreates VSS catalog and store from Windows disk image.
  ☆97Updated 2 years ago
• FFRI / ffridataset-scripts
  Make datasets like FFRI Dataset
  ☆10Updated 6 months ago
• sysopfb / Malware_Scripts
  Various scripts for different malware families
  ☆104Updated 3 years ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆159Updated 2 months ago
• PoorBillionaire / Windows-Prefetch-Parser
  Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files
  ☆115Updated 8 months ago
• dgunter / evtxtoelk
  A lightweight tool to load Windows Event Log evtx files into Elasticsearch.
  ☆115Updated 4 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆105Updated 6 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆195Updated last year