Recruit-CSIRT / LinuxTriage
R-CSIRT Linux Triage tool
☆38Updated 6 years ago
Alternatives and similar repositories for LinuxTriage:
Users that are interested in LinuxTriage are comparing it to the libraries listed below
- CDIR Analyzer - parsers for data collected by CDIR Collector☆18Updated last year
- An advanced parser for INDX records☆27Updated 5 years ago
- A DFIR tool to collect artifacts on macOS☆54Updated 5 years ago
- macOS Artifact Intelligence Tool☆13Updated 5 years ago
- Mass Triage Tools☆20Updated 2 months ago
- DFIR notes for Citrix ADC (NetScaler) appliances vulnerable to CVE-2019-19781☆45Updated 5 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago
- Cuckoo Sandbox plugin for extracts configuration data of known malware☆135Updated last year
- A DFIR tool to analyze artifacts on macOS☆33Updated 4 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated 2 months ago
- Carve $MFT records from a chunk of data (for instance a memory dump)☆16Updated 8 years ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆39Updated 2 years ago
- Because phishtank was taken.. explore phishing kits in a contained environment!☆46Updated 2 years ago
- Different DFIR and CTI utilities☆36Updated 4 years ago
- ☆22Updated 6 months ago
- ☆34Updated 6 months ago
- Hunt malware with Volatility☆47Updated 11 months ago
- pocket guide for core threat hunting concepts☆23Updated 4 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- Tools for parsing Forensic images☆41Updated 6 years ago
- A completely unsupported set of scripts used in SANS FOR572, Advanced Network Forensics and Analysis☆26Updated 4 months ago
- ☆39Updated 5 years ago
- A rewrite of mactime, a bodyfile reader☆37Updated 8 months ago
- ☆23Updated 5 years ago
- Carves and recreates VSS catalog and store from Windows disk image.☆98Updated 2 years ago
- Ghidra Script for automated analysis of EMOTET☆17Updated 4 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆44Updated 3 years ago
- Simple yara rule manager☆66Updated 2 years ago
- Miscellaneous Scripts☆17Updated 4 years ago