att / docker-forensics

Related projects: ⓘ

• Security-Onion-Solutions / securityonion-elastic
  Security Onion Elastic Stack
  ☆46Updated 3 years ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆145Updated 2 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆50Updated 3 years ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆33Updated last month
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 6 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆54Updated 3 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 3 years ago
• Neo23x0 / exotron
  Sandbox feature upgrade with the help of wrapped samples
  ☆75Updated 6 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆66Updated 4 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆107Updated 6 years ago
• teamdfir / volatility-plugins-community
  Volatility plugins developed and maintained by the community
  ☆21Updated 6 years ago
• aboutsecurity / Talks-and-Presentations
  Slides and Other Resources from my latest Talks and Presentations
  ☆24Updated 3 years ago
• OTRF / infosec-jupyterthon
  A community event for security researchers to share their favorite notebooks
  ☆105Updated 7 months ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 3 years ago
• defensivedepth / Pertinax
  Integrating Sysinternals Autoruns’ logs into Security Onion
  ☆30Updated 7 months ago
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆76Updated 3 years ago
• CIRCL / pystemon
  Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon
  ☆43Updated 3 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 3 years ago
• msuhanov / yarp
  Yet another registry parser
  ☆128Updated 2 years ago
• weslambert / securityonion-misp
  ☆34Updated 3 years ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated last year
• opensourcesec / CIRTKit
  Tools for the Computer Incident Response Team
  ☆141Updated 7 years ago
• dstaulcu / TA-Sigma-Searches
  A Splunk app with saved reports derived from Sigma rules
  ☆72Updated 6 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆184Updated 11 months ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆70Updated 2 years ago
• bromiley / pollen
  pollen - A command-line tool for interacting with TheHive
  ☆34Updated 5 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆67Updated 10 months ago
• SMAPPER / MimikatzHoneyToken
  This is a logon script used to detect the theft of credentials by tools such as Mimikatz
  ☆116Updated 9 years ago
• mayhemiclabs / weblabyrinth
  A system that creates a bogus web structure to entrap and delay web scanners
  ☆52Updated 3 years ago
• csababarta / volatility_plugins
  Volatility plugins created by the author
  ☆44Updated 8 years ago
• tenable / yara-rules
  Repository of yara rules
  ☆57Updated last year