Alternatives and similar repositories for EventWhisper

Users that are interested in EventWhisper are comparing it to the libraries listed below

• cocopollo / HunterM
  macOS Artifacts
  ☆33Updated 10 months ago
• strozfriedberg / QELP
  Quick ESXi Log Parser
  ☆28Updated 3 months ago
• Yamato-Security / hayabusa-sample-evtx
  Sample evtx files to use for testing hayabusa detection rules
  ☆64Updated 2 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆65Updated last year
• Beercow / DFIR_Toolbar
  ☆28Updated 3 months ago
• svch0stz / velociraptor-detections
  ☆22Updated 3 years ago
• Koifman / LUMEN
  Your Browser-based EVTX Companion
  ☆112Updated 2 weeks ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆37Updated 8 months ago
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆65Updated last year
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆103Updated 2 weeks ago
• fboldewin / YARA_Detection_Engineering
  Detection Engineering with YARA
  ☆86Updated 2 years ago
• stuxnet999 / EventTranscriptParser
  Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
  ☆68Updated 2 years ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆86Updated last month
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆73Updated last year
• microsoft / tim-data-investigate-platform
  TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…
  ☆23Updated last year
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆126Updated last year
• khyrenz / parseusbs
  Parses USB connection artifacts from offline Registry hives
  ☆105Updated 7 months ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆55Updated 2 years ago
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆73Updated 3 weeks ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• AttackIQ / DetectIQ
  ☆120Updated 8 months ago
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆89Updated 11 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆88Updated last year
• openrelik / openrelik-deploy
  Tools and scripts to deploy and manage OpenRelik instances
  ☆16Updated 7 months ago
• curated-intel / The-CTI-Research-Guide
  A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners
  ☆115Updated last year
• Cyb3rWard0g / IntelRAGU
  Intel Retrieval Augmented Generation (RAG) Utilities
  ☆91Updated 2 years ago
• ApexPredator-InfoSec / DFIR-Malware-Analysis
  Tools for Incident Response and Malware Analysis
  ☆11Updated 11 months ago
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆123Updated last year
• bricerenaud / xdr_yara_rule_matching
  custom Python script to perform Yara matching in Cortex XDR
  ☆14Updated 4 years ago
• eSentire / iocs
  ☆53Updated last week