Alternatives and similar repositories for EDI:

Users that are interested in EDI are comparing it to the libraries listed below

• 0Xdarkday / Investigator-Hand
  ☆14Updated 4 months ago
• 0xHasanM / MISC
  ☆16Updated last month
• abdulshareef / DFIR-Resources
  Some important DFIR Resources
  ☆83Updated 2 years ago
• dfircheatsheet / dfircheatsheet.github.io
  ☆65Updated 2 years ago
• CyberCastle-Blueteam / OpenThreatDetectionRules
  A collection of open source threat detection rules created by Cyber Castle's team.
  ☆14Updated 2 years ago
• BankSecurity / Threat_Hunting
  Some Threat Hunting queries useful for blue teamers
  ☆125Updated 2 years ago
• mttaggart / blue-jupyter
  Jupyter Notebooks for the Blue Team
  ☆145Updated last week
• nasbench / SIGMA-Resources
  Resources To Learn And Understand SIGMA Rules
  ☆174Updated 2 years ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆47Updated last year
• 0xHasanM / LogonSessionAuditor
  This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…
  ☆31Updated last month
• The-DFIR-Report / DFIR-Artifacts
  Repository for sharing examples of our artifacts data and for use in new analyst recruitment.
  ☆49Updated this week
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆87Updated last year
• isherwood-sec / detection-engineering
  ☆47Updated last month
• SoulSec / resource-threat-hunting
  Repository resource for threat hunter
  ☆158Updated 6 years ago
• Gi7w0rm / MalwareConfigLists
  Just some lists of Malware Configs
  ☆169Updated 2 months ago
• mf1d3l / Splunk4DFIR
  Harness the power of Splunk for your investigations
  ☆95Updated 2 weeks ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆71Updated 6 months ago
• secure-cake / win-mal-investigations
  Windows Malware Investigation Scripts & Docs
  ☆81Updated 4 months ago
• activecm / threat-tools
  Tools for simulating threats
  ☆183Updated last year
• dbissell6 / DFIR
  This is a repository dedicated to the DFIR journey. Contains notes, reflections and links to tools.
  ☆68Updated this week
• 0xph03n1x / eCTHPv2
  Collection of scripts and tools related to the eCTHPv2 exam by INE.
  ☆13Updated 2 years ago
• mamun-sec / decap
  ☆34Updated last year
• mbabinski / Sigma-Rules
  A repository of my own Sigma detection rules.
  ☆157Updated 6 months ago
• chocolatecoat / DFIR-Templates
  Incident Response documents and tooling
  ☆69Updated last year
• curated-intel / Threat-Actor-Profile-Guide
  The Threat Actor Profile Guide for CTI Analysts
  ☆106Updated last year
• mthcht / Purpleteam
  Purpleteam scripts simulation & Detection - trigger events for SOC detections
  ☆183Updated 3 months ago
• blwhit / EDR-Attack-and-Defense
  Cyber Attack/Defense home lab using Sliver, LimaCharlie [SIEM], & VM's to simulate C&C, Threat Detection, etc.
  ☆9Updated last year
• archanchoudhury / DFIR-Tools
  This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR
  ☆77Updated 3 years ago
• adanalvarez / AWS-malware-lab
  Creation of a laboratory for malware analysis in AWS
  ☆96Updated 2 years ago
• maddev-engenuity / AdversaryEmulation
  MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository
  ☆112Updated last year