CybercentreCanada / assemblyline-docker-composeLinks
Docker compose Assemblyline 4 deployment (appliance and development)
☆17Updated 2 weeks ago
Alternatives and similar repositories for assemblyline-docker-compose
Users that are interested in assemblyline-docker-compose are comparing it to the libraries listed below
Sorting:
- AssemblyLine 4: File triage and malware analysis☆392Updated this week
- WISKESS automates the Windows evidence processing for Incident Response investigations. Rust version.☆14Updated last month
- Sigma rule specification☆156Updated this week
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆183Updated 3 weeks ago
- Pipeline that allows sending forensic artifacts to OpenRelik for automatic processing☆35Updated 6 months ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆116Updated 2 years ago
- A production ready Dockered MISP☆291Updated this week
- AssemblyLine4 documentation☆28Updated this week
- A yara based MCP Server☆16Updated this week
- An opensource sigma conversion tool built using pysigma☆147Updated last month
- Python client for DFIR-IRIS☆25Updated last year
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆72Updated last month
- The Sigma command line interface based on pySigma☆166Updated last week
- Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)☆497Updated this week
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆298Updated 6 months ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆396Updated 2 weeks ago
- Harness the power of Splunk for your investigations☆141Updated last month
- A web application for generating, parsing and validating, manipulating, visualizing and executing CACAO v2.0 playbooks.☆39Updated 2 months ago
- ☆53Updated last year
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆212Updated 3 weeks ago
- DFIQ is a collection of investigative questions and the approaches for answering them☆294Updated 10 months ago
- Docker image for Velocidex Velociraptor☆140Updated 8 months ago
- The Volatility Collaborative GUI☆260Updated last week
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…