Alternatives and similar repositories for velociraptor-artifacts-thor

Users that are interested in velociraptor-artifacts-thor are comparing it to the libraries listed below

• WesSec / VelociDeploy-o-Matic
  Scripts to for ready-to-use Velociraptor instance deployment in Azure
  ☆14Updated 2 years ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated last year
• svch0stz / velociraptor-detections
  ☆22Updated 2 years ago
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆33Updated 2 months ago
• delivr-to / detections
  A home for detection content developed by the delivr.to team
  ☆70Updated 2 weeks ago
• Velocidex / cloudvelo
  An experimental Velociraptor implementation using cloud infrastructure
  ☆25Updated last week
• McL0vinn / Windows-Forensic-Examination-and-Threat-Hunting
  Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…
  ☆12Updated 3 years ago
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated last year
• gsiddharth29 / Threat-Hunting
  Threat Hunt Investigation Methodology and Procedure
  ☆15Updated 3 years ago
• cmdshiftd / elrond
  Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
  ☆31Updated 6 months ago
• NVISOsecurity / nviso-cti
  ☆43Updated last month
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆25Updated 11 months ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆53Updated 8 months ago
• op7ic / Cloud-Investigate
  A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.
  ☆39Updated last year
• CERT-EDF / generaptor
  CLI generator for Velociraptor offline collector
  ☆10Updated 11 months ago
• evild3ad / Get-MiniTimeline
  Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE
  ☆32Updated last year
• elementalsouls / DumpLSASS
  ☆33Updated last year
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆74Updated 3 years ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆52Updated 2 years ago
• strozfriedberg / QELP
  Quick ESXi Log Parser
  ☆24Updated last week
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Updated 2 years ago
• Tatsuya-hasegawa / MSTICPy_utils
  my MSTICpy practice and custom tools repository
  ☆11Updated 4 months ago
• jgasmussen / Linux-Baseline-and-Forensic-Triage-Tool
  Linux Baseline and Forensic Triage Tool - BETA
  ☆57Updated 2 years ago
• montysecurity / InfraHunter
  Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.
  ☆61Updated last year
• NexusFuzzy / raccoon_config
  Scans a list of raccoon servers from Tria.ge and extracts the config
  ☆15Updated 2 years ago
• BushidoUK / Abused-Legitimate-Services
  Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
  ☆60Updated 2 years ago
• The-DFIR-Report / Suricata-Rules
  ☆11Updated 2 years ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆53Updated last year
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆102Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆79Updated last year