bannsec / autopsy_dockerLinks
Docker build for autopsy
☆21Updated 4 years ago
Alternatives and similar repositories for autopsy_docker
Users that are interested in autopsy_docker are comparing it to the libraries listed below
Sorting:
- XOR Key Extractor☆50Updated last year
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Updated 3 years ago
- unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Andro…☆38Updated 4 months ago
- TAPIR is a multi-user, client/server, incident response framework☆46Updated 3 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆74Updated 3 years ago
- Carbon Black Response IR tool☆54Updated 4 years ago
- Malware similarity platform with modularity in mind.☆78Updated 4 years ago
- ☆44Updated 3 months ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆31Updated 8 months ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- Valhalla API Client☆70Updated 2 years ago
- Yara Based Detection Engine for web browsers☆49Updated 4 years ago
- Incident response teams usually working on the offline data, collecting the evidence, then analyze the data☆45Updated 3 years ago
- ☆38Updated 3 years ago
- Simple yara rule manager☆66Updated 2 years ago
- Standardized Malware Analysis Tool☆55Updated 4 years ago
- A toolkit for the post-mortem examination of Docker containers from forensic HDD copies☆104Updated last year
- Hunt malware with Volatility☆47Updated 3 months ago
- ☆69Updated 4 years ago
- Machine Interrogation To Identify Gaps & Techniques for Execution☆32Updated 3 years ago
- Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets.☆62Updated 3 years ago
- Python based CLI for MalwareBazaar☆38Updated 2 months ago
- BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.☆32Updated 5 years ago
- Python command line tool used for generating GIAC Certification indexes.☆27Updated 2 years ago
- Automatic detection engineering technical state compliance☆55Updated last year
- Compilation of resources to help with Adversary Simulation automation harness☆100Updated 5 years ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated 2 weeks ago
- Various capabilities for static malware analysis.☆79Updated last year
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆13Updated 4 years ago
- A Modular MWDB Utility to Collect Fresh Malware Samples☆34Updated 4 years ago