DFIR-ORC / dfir-orc.github.io

Related projects ⓘ

Alternatives and complementary repositories for dfir-orc.github.io

• DFIR-ORC / dfir-orc-config
  Configurations for DFIR ORC
  ☆24Updated 7 months ago
• 00010111 / smbtimeline
  ☆31Updated 2 weeks ago
• ANSSI-FR / bits_parser
  Extract BITS jobs from QMGR queue and store them as CSV records
  ☆74Updated 4 months ago
• cudeso / dfir-iris-misp-timesketch
  Scripts to integrate DFIR-IRIS, MISP and TimeSketch
  ☆31Updated 2 years ago
• TazWake / Public
  Collection of scripts provided for public use
  ☆31Updated 3 weeks ago
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆75Updated 5 months ago
• d3sre / IntelligentProcessLifecycle
  The Intelligent Process Lifecycle of Active Cyber Defenders
  ☆31Updated last year
• cudeso / misp-tip-of-the-week
  A collection of tips for using MISP.
  ☆74Updated 7 months ago
• alwashmi / MasterParser
  MasterParser is a simple, all-in-one, digital forensics artifact parser
  ☆23Updated 3 years ago
• MattETurner / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆49Updated 3 months ago
• nov3mb3r / trident
  A PowerShell incident response script for quick triage
  ☆75Updated 2 years ago
• NextronSystems / nextron-helper-scripts
  Public tools, scripts or code snippets that can help when working with our products
  ☆46Updated 2 months ago
• marjatech / threatfox2misp
  Creating a Feed of MISP Events from ThreatFox (by abuse.ch)
  ☆19Updated 3 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆68Updated 11 months ago
• Ruler-Project / ruler-project
  Remote access and Antivirus Logging Database
  ☆41Updated 6 months ago
• RH-ISAC / PyOTI
  Python library for threat intelligence
  ☆79Updated 4 months ago
• swisscom / PowerSponse
  PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
  ☆38Updated 2 years ago
• AndrewRathbun / EventTranscript.db-Research
  A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.
  ☆39Updated 2 years ago
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆53Updated 3 years ago
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated last year
• 4n6ist / bulk_extractor-rec
  It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving
  ☆37Updated 4 years ago
• The-DFIR-Report / cyberchef-recipes
  ☆18Updated 2 years ago
• cerebrate-project / cerebrate
  Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…
  ☆83Updated 3 weeks ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆1Updated 2 weeks ago
• nettitude / defensive-scripts
  Defence Against the Dark Arts
  ☆34Updated 5 years ago
• mohlcyber / MISP-MVISION-EDR
  Integration between MISP platform and McAfee MVISION EDR
  ☆14Updated 2 years ago
• SigmaHQ / pySigma-backend-splunk
  pySigma Splunk backend
  ☆34Updated 7 months ago
• cudeso / CSIRT-Jump-Bag
  CSIRT Jump Bag
  ☆27Updated 6 months ago
• Velocidex / velociraptor-docs
  Documentation site for Velociraptor
  ☆37Updated this week
• Fadavvi / Yara-Repo
  A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-system…
  ☆26Updated last year