Alternatives and similar repositories for FOR610:

Users that are interested in FOR610 are comparing it to the libraries listed below

• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 2 years ago
• marcurdy / dfir-toolset
  Dump of organized knowledge on DFIR
  ☆132Updated 3 years ago
• MAECProject / schemas
  MAEC Schemas and Schema Development
  ☆84Updated 4 years ago
• mark-hallman / plaso_filters
  Scripts to facilitate filtering with Plaso
  ☆125Updated 4 years ago
• MITRECND / malchive
  Various capabilities for static malware analysis.
  ☆75Updated 4 months ago
• megan201296 / gsuite-dfir
  ☆41Updated 4 years ago
• dfirtips / evids.dfir.tips
  ☆11Updated 4 years ago
• ReconInfoSec / velociraptor-to-timesketch
  ☆4Updated 2 months ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆303Updated this week
• fox-it / acquire
  acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
  ☆93Updated this week
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆193Updated last week
• CERT-Polska / training-mwdb
  MWDB exercises
  ☆19Updated 7 months ago
• CybercentreCanada / assemblyline4_docs
  AssemblyLine4 documentation
  ☆28Updated this week
• SCILabsMX / yaraZeekAlert
  This script scans the files extracted by Zeek with YARA rules located on the rules folder on a Linux based Zeek sensor, if there is a mat…
  ☆61Updated last year
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆134Updated 4 years ago
• AmgdGocha / DriveFS-Sleuth
  DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based o…
  ☆77Updated last month
• Maboalenen / DFIR
  Incident response teams usually working on the offline data, collecting the evidence, then analyze the data
  ☆44Updated 3 years ago
• rj-chap / CFWorkshop
  Understanding and analyzing carrier files workshop repo
  ☆48Updated 5 years ago
• markmckinnon / cLeapp
  Chrome Logs Events and Protobuf Parser
  ☆36Updated 2 years ago
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆185Updated 4 months ago
• zerofox-oss / phishpond
  Because phishtank was taken.. explore phishing kits in a contained environment!
  ☆45Updated 2 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆199Updated 3 years ago
• redhat-infosec / priority-intelligence-requirements-dev
  This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements
  ☆115Updated last year
• brimorlabs / rdpieces
  The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images
  ☆78Updated last year
• kirk-sayre-work / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆93Updated 2 months ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆64Updated 11 months ago
• blueteam0ps / AllthingsTimesketch
  This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.
  ☆101Updated last year
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆83Updated 4 years ago