Alternatives and similar repositories for GWForensic

Users that are interested in GWForensic are comparing it to the libraries listed below

• The-DFIR-Report / DFIR-Artifacts
  Repository for sharing examples of our artifacts data and for use in new analyst recruitment.
  ☆109Updated 9 months ago
• BushidoUK / Ransomware-Vulnerability-Matrix
  A collection of CVEs weaponized by ransomware operators
  ☆129Updated 3 months ago
• Invoke-RE / community-malware-research
  A repository to store community malware research notes and findings.
  ☆15Updated last month
• TLP-R3D / R3D-SSH-Hunter
  R3D SSH Hunter: The Ultimate SSH Key and Bad Guy Tracker
  ☆12Updated last year
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆194Updated last week
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆151Updated last year
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆89Updated last year
• secure-cake / win-mal-investigations
  Windows Malware Investigation Scripts & Docs
  ☆85Updated last year
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆103Updated 3 weeks ago
• Ahmed-AL-Maghraby / Windows-Registry-Analysis-Cheat-Sheet
  ☆173Updated 2 years ago
• cgosec / Blauhaunt
  A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…
  ☆180Updated 8 months ago
• ApexPredator-InfoSec / DFIR-Malware-Analysis
  Tools for Incident Response and Malware Analysis
  ☆11Updated last year
• MalBeacon / what-is-this-stealer
  A repository of credential stealer formats
  ☆242Updated 7 months ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆89Updated last year
• securityjoes / ForensicMiner
  A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
  ☆162Updated 10 months ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated 2 years ago
• curated-intel / Attribution-to-IP
  A collection of methods to learn who the owner of an IP address is.
  ☆224Updated 4 months ago
• khyrenz / parseusbs
  Parses USB connection artifacts from offline Registry hives
  ☆106Updated 7 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆155Updated this week
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆126Updated last year
• jonny-jhnson / JonMon
  ☆250Updated 8 months ago
• arosenmund / defcon32_dissecting_defeating_ransomwares_evasion
  Dissecting and Defeating Ransomware's Evasion Tactics Defcon 32
  ☆17Updated last year
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆65Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆143Updated last week
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆73Updated last year
• LivingInSyn / RMML
  A list of RMMs designed to be used in automation to build alerts
  ☆117Updated 2 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆66Updated last year
• curated-intel / The-CTI-Research-Guide
  A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners
  ☆115Updated last year
• dfir-scripts / siftgrab
  ☆68Updated 2 months ago
• magicsword-io / LOLRMM
  LotL RMM
  ☆289Updated last week