Configurations for DFIR ORC
☆30Oct 9, 2026Updated 3 weeks ago
Alternatives and similar repositories for dfir-orc-config
Users that are interested in dfir-orc-config are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12Oct 8, 2026Updated 3 weeks ago
- Forensics artefact collection tool for systems running Microsoft Windows☆453Oct 8, 2026Updated 3 weeks ago
- Détection d'anomalie à partir des journaux d'authentification Windows☆18Apr 16, 2021Updated 5 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 7 months ago
- Indicators of compromise☆19May 18, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Feb 13, 2025Updated last year
- A web front-end providing a REST-ful API to mount and unmount forensic disk images☆21Feb 14, 2026Updated 8 months ago
- Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data☆23Oct 9, 2026Updated 2 weeks ago
- Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.☆15May 12, 2023Updated 3 years ago
- PowerShell module for Office 365 and Azure log collection☆284Sep 22, 2025Updated last year
- ☆17Mar 22, 2018Updated 8 years ago
- DFIQ is a collection of investigative questions and the approaches for answering them☆316Mar 10, 2026Updated 7 months ago
- More Obvious Webmalware Repository☆16Dec 16, 2016Updated 9 years ago
- Yara Rules for Modern Malware☆81Mar 3, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Regipy is an os independent python library for parsing offline registry hives☆277Oct 18, 2026Updated last week
- Incident Response Scripts☆30Mar 1, 2020Updated 6 years ago
- Repository with selected IOCs and YARA rules for threat hunting.☆35Apr 8, 2026Updated 6 months ago
- RDP Bitmap Cache parser☆700Apr 27, 2026Updated 6 months ago
- Volatility plugin to help identify DoublePulsar implant by listing the array of pointers SrvTransaction2DispatchTable from the srv.sys dr…☆16Aug 14, 2017Updated 9 years ago
- Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …☆84Feb 21, 2024Updated 2 years ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- ☆14Apr 24, 2026Updated 6 months ago
- A script to assist in processing forensic RAM captures for malware triage☆26Feb 4, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆23May 19, 2019Updated 7 years ago
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆12Nov 24, 2023Updated 2 years ago
- Bypass for the hardening against usage of tagWnd as a kernel read/write primitive☆32Mar 22, 2017Updated 9 years ago
- ☆18Nov 12, 2019Updated 6 years ago
- Timeline of Active Directory changes with replication metadata☆536Mar 21, 2025Updated last year
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Apr 5, 2020Updated 6 years ago
- Ansible playbook to deploy a Nextcloud instance on a clean Ubuntu server (LEMP stack)☆16Nov 11, 2022Updated 3 years ago
- Repository to provide files related to our blog articles.☆17Sep 23, 2026Updated last month
- Command line access to the Registry☆184Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cheat-Sheet with events too look out for when analysing malicious Office documents☆19Oct 21, 2017Updated 9 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- ☆15May 1, 2023Updated 3 years ago
- ☆12Feb 13, 2024Updated 2 years ago
- Read Windows message table entries.☆11Feb 5, 2023Updated 3 years ago
- Digital Forensics artifact repository☆1,283Updated this week
- Browser extension blocking scam and phishing pages https://chromewebstore.google.com/detail/nehboro/ljgklnaofelbcnegjniagpmjknkmaiom☆17Apr 22, 2026Updated 6 months ago