☆71May 3, 2021Updated 5 years ago
Alternatives and similar repositories for Lab-DFIR-SOC
Users that are interested in Lab-DFIR-SOC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DFIRLab / Plateforme d'investigation numérique☆15Jul 6, 2021Updated 5 years ago
- This project is a SIEM with SIRP and Threat Intel, all in one.☆463Nov 20, 2024Updated last year
- Sigma rules converted for direct use with Zircolite☆15Oct 24, 2026Updated last week
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆31May 21, 2026Updated 5 months ago
- Generate malware traces for detection tests☆19Oct 13, 2026Updated 2 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.☆15Jul 13, 2023Updated 3 years ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- Sigma detection rules for hunting with the threathunting-keywords project☆61Mar 2, 2025Updated last year
- ☆54May 14, 2024Updated 2 years ago
- Collection of some personal markdown resources☆22Jan 31, 2019Updated 7 years ago
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆116Sep 14, 2022Updated 4 years ago
- Tool to extract indicators of compromise from security reports in PDF,HTML,Web,Text format☆10Nov 6, 2017Updated 8 years ago
- SMTP honeypot written in Golang☆32Aug 9, 2016Updated 10 years ago
- ☆11Aug 10, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Powershell module for VMWare vSphere forensics☆189Nov 8, 2024Updated last year
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- ☆18Jan 18, 2022Updated 4 years ago
- "Pure" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on …☆12Nov 30, 2025Updated 11 months ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Mar 25, 2024Updated 2 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆98May 28, 2023Updated 3 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- This a Complete tool contained box for Capture The Flag competition. Mostly I have inserted all the necessary tools. Some of the people h…☆11Apr 16, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Converts binary files of 1C (1CD, cf, epf, efd, etc.) to grepable CSV☆16Feb 12, 2024Updated 2 years ago
- Telegram OSINT, Reconnaissance & Chat Analytics Framework.☆75May 15, 2026Updated 5 months ago
- https://github.com/yeyintminthuhtut/Awesome-Red-Teaming☆17Jan 15, 2022Updated 4 years ago
- Automagically extract forensic timeline from volatile memory dump☆133Mar 5, 2026Updated 7 months ago
- ☆11Jan 22, 2025Updated last year
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- This repository contains tools used by 401trg.☆21Apr 14, 2021Updated 5 years ago
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆28Updated this week
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆667Jun 19, 2024Updated 2 years ago
- Documentation and scripts to properly enable Windows event logs.☆724Oct 3, 2025Updated last year
- Automated Detection-as-Code (DaC) CI/CD pipeline for validating and programmatically deploying SIEM detection rules via GitHub Actions an…☆12Aug 31, 2026Updated last month
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 2 months ago
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆554Sep 2, 2022Updated 4 years ago
- Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk☆12Aug 18, 2022Updated 4 years ago