Alternatives and similar repositories for Python-Digital-Forensics-Cookbook

Users that are interested in Python-Digital-Forensics-Cookbook are comparing it to the libraries listed below

• Hestat / soc-threat-hunting
  Repo of python/bash scripts for identifying IoC's in threat feed and other online tools
  ☆27Updated 5 years ago
• MarkBaggett / GeoLocationNotebook
  ☆39Updated 4 years ago
• andreafortuna / autotimeliner
  Automagically extract forensic timeline from volatile memory dump
  ☆132Updated last year
• ashwin-patil / threat-hunting-with-notebooks
  Repository with Sample threat hunting notebooks on Security Event Log Data Sources
  ☆66Updated 2 years ago
• SecurityNik / pktIntel
  Tool used to perform threat intelligence against packet data
  ☆35Updated 8 months ago
• ninoseki / uzen
  Website crawler with YARA detection
  ☆89Updated 2 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 5 years ago
• forensicmatt / PancakeViewer
  A DFVFS Backed Forensic Viewer
  ☆40Updated 5 years ago
• MarkBaggett / apiify
  Wrap any binary into a cached webserver
  ☆54Updated 3 years ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆37Updated 5 years ago
• JCyberSec / CTIURLScan
  CTI-URLScan is a command line tool to enable analysts to search URLscan.io submissions. Pull screenshot and DOM content. As well as, auto…
  ☆10Updated 4 years ago
• InQuest / ThreatKB
  Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)
  ☆103Updated 2 months ago
• alph4w0lf / LokiX
  Lokix Platform is a free open-source solution to help blue teams and threat hunters use Loki Scanner to sweep enterprise networks
  ☆25Updated 5 years ago
• neolea / neolea-training-materials
  Open source training materials for law-enforcement and organisations interested in DFIR.
  ☆60Updated 3 months ago
• shr3ddersec / ThreatHunting
  Reference sheet for Threat Hunting Professional Course
  ☆25Updated 6 years ago
• jankais3r / Forensic-Version-Checker
  Script that checks for available updates for the most commonly used Digital Forensics tools
  ☆59Updated 4 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆50Updated 4 years ago
• AJMartel / IRTriage
  Incident Response Triage - Windows Evidence Collection for Forensic Analysis
  ☆134Updated 9 years ago
• randomuserid / Baltar
  Searches for Insider Threat Hunting
  ☆32Updated 6 years ago
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 5 years ago
• jalewis / actortrackr
  Home to the ActorTrackr source code
  ☆29Updated 8 years ago
• Jrotenberger / Powershell-IR-Scripts
  ☆39Updated 6 years ago
• MISP / best-practices-in-threat-intelligence
  Best practices in threat intelligence
  ☆48Updated 2 years ago
• open-source-dfir / slack
  Information about the open-source-dfir slack community
  ☆30Updated 2 years ago
• Maboalenen / DFIR
  Incident response teams usually working on the offline data, collecting the evidence, then analyze the data
  ☆45Updated 3 years ago
• ExabeamLabs / Synopsis
  Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.
  ☆21Updated 6 years ago
• PythonForensics / PythonForensicsCookbook
  Code for the Python Digital Forensics Cookbook
  ☆63Updated 7 years ago
• OTRF / notebooks-forge
  A collection of notebooks built for defensive and offensive operations.
  ☆77Updated 4 years ago
• mosse-security / threat-hunting-samples
  Three datasets to practice Threat Hunting against.
  ☆46Updated last year
• 3c7 / common-osint-model
  Converting data from services like Censys and Shodan to a common data model
  ☆50Updated 3 months ago