Alternatives and similar repositories for docker-forensics

Users that are interested in docker-forensics are comparing it to the libraries listed below

• google / GiftStick
  1-Click push forensics evidence to the cloud
  ☆141Updated last year
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆110Updated 7 years ago
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆114Updated 4 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆68Updated 5 years ago
• py4n6 / pyflag
  Python Forensic and Log Analysis GUI
  ☆26Updated 10 years ago
• halpomeranz / dfis
  Digital Forensic Investigative Scripts
  ☆83Updated last week
• Security-Onion-Solutions / securityonion-elastic
  Security Onion Elastic Stack
  ☆46Updated 4 years ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆73Updated 3 years ago
• AlienVault-OTX / OTX-Apps-TAXII
  Alienvault OTX TAXII connector
  ☆56Updated 8 years ago
• sans-blue-team / NSM
  This repository is created to add value to existing Network Security Monitoring solutions.
  ☆43Updated 8 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 4 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆50Updated 4 years ago
• HASecuritySolutions / elastic_stack
  ☆34Updated 4 years ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆37Updated 5 years ago
• cudeso / tools
  Different tools, koen.vanimpe@cudeso.be
  ☆136Updated last month
• teamdfir / sift-saltstack
  Salt States for Configuring the SIFT Workstation
  ☆105Updated last week
• COVID-19-CTI-LEAGUE / PUBLIC_RELEASE
  Files vetted, and approved for public release
  ☆53Updated last year
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆88Updated 6 years ago
• bromiley / pollen
  pollen - A command-line tool for interacting with TheHive
  ☆35Updated 6 years ago
• MarkBaggett / werejugo
  Identifies physical locations where a laptop has been based upon wireless profiles and wireless data recorded in event logs
  ☆93Updated 4 years ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• airbus-cert / Splunk-ETW
  A Splunk Technology Add-on to forward filtered ETW events.
  ☆30Updated 4 years ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆52Updated 2 months ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆69Updated last year
• swisscom / detections
  Threat intelligence and threat detection indicators (IOC, IOA)
  ☆52Updated 4 years ago
• 0xtf / testmynids.org
  A website and framework for testing NIDS detection
  ☆57Updated 4 years ago
• certsocietegenerale / fame_modules
  Community modules for FAME
  ☆65Updated last month
• sophos / solarwinds-threathunt
  Threathunt details for the Solarwinds compromise
  ☆33Updated 4 years ago
• zeek / zeek-docs
  Documentation for Zeek
  ☆50Updated this week
• mantarayforensics / mantaray
  MantaRay Automated Computer Forensic Triage Tool
  ☆63Updated 6 years ago