att / docker-forensics
Tools to assist in forensicating docker
☆80Updated last month
Related projects ⓘ
Alternatives and complementary repositories for docker-forensics
- A rewrite of mactime, a bodyfile reader☆36Updated 3 months ago
- Expert Investigation Guides☆50Updated 3 years ago
- 1-Click push forensics evidence to the cloud☆139Updated 4 months ago
- Recon Hunt Queries☆75Updated 3 years ago
- A collection of typical false positive indicators☆54Updated 3 years ago
- SightingDB is a database for Sightings☆21Updated last year
- Security Onion Elastic Stack☆46Updated 3 years ago
- Salt States for Configuring the SIFT Workstation☆97Updated this week
- Invoke-LiveResponse☆145Updated 2 years ago
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- An ELK environment containing interesting security datasets.☆134Updated 4 years ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆104Updated 6 years ago
- Legal, procedural and policies document templates for operating MISP and information sharing communities☆37Updated last year
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 3 years ago
- Build Automated Machine Images for MISP☆28Updated last year
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆86Updated 2 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- PowerShell No Agent Hunting☆108Updated 6 years ago
- Sandbox feature upgrade with the help of wrapped samples☆75Updated 6 years ago
- pollen - A command-line tool for interacting with TheHive☆34Updated 5 years ago
- Tools to automate and/or expedite response.☆113Updated 4 months ago
- first commit☆20Updated last year
- Yet another registry parser☆130Updated 2 years ago
- Carbon Black Feeds☆70Updated last year
- A Splunk app with saved reports derived from Sigma rules☆72Updated 6 years ago
- Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.☆69Updated last year
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆162Updated 5 years ago