AWS EKS Cluster Forensics
☆23Aug 16, 2021Updated 5 years ago
Alternatives and similar repositories for AWS_EKS_Cluster_Forensics
Users that are interested in AWS_EKS_Cluster_Forensics are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simulates a compromise in a cloud and container environment☆35Dec 18, 2024Updated last year
- DFORC2 is a cloud-based digital forensics platform, developed at the RAND Corporation and backed by Autopsy and The Sleuth Kit. This repo…☆14Jul 9, 2020Updated 6 years ago
- A rewrite of mactime, a bodyfile reader☆41Aug 5, 2024Updated 2 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Demo application using GitOps best practices with Flux☆14Nov 29, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆13Feb 6, 2018Updated 8 years ago
- Source files found after a recent hack of one of my machines, showing how the infection spreads itself and what it does, useful for analy…☆12May 4, 2020Updated 6 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 5 years ago
- Extract common Windows artifacts from source images and VSCs☆65May 10, 2021Updated 5 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- my MSTICpy practice and custom tools repository☆11Apr 23, 2025Updated last year
- DFIR Presentations☆16Apr 24, 2026Updated 4 months ago
- ☆19Aug 6, 2021Updated 5 years ago
- Check your websites for viruses automatically using multiple anti-virus engines.☆14May 28, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Decides if provided domains are safe based on DNS threat blocking providers intelligence. Does not required to have any blocklist.☆15Jan 10, 2018Updated 8 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Cybersecurity Incidents Mind Maps☆34Sep 29, 2021Updated 4 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 6 years ago
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- Web based analysis platform for use with the AWS_IR command line tool.☆16Aug 4, 2016Updated 10 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices☆168May 21, 2020Updated 6 years ago
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆69Sep 13, 2023Updated 2 years ago
- ☆17Jul 2, 2026Updated 2 months ago
- Parsers for common structures across windows formats.☆12Aug 23, 2023Updated 3 years ago
- Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack☆182Jul 6, 2021Updated 5 years ago
- Parses USB connection artifacts from offline Registry hives☆110Feb 8, 2026Updated 6 months ago
- A small tool to easily mount APFS image on macOS for forensics.☆17Jul 30, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A visualized overview of the Initial Access Broker (IAB) cybercrime landscape☆117Oct 22, 2021Updated 4 years ago
- Get USB Devices from Registry hives☆22Nov 15, 2021Updated 4 years ago
- isodump - ISO dump utility☆41Jun 9, 2019Updated 7 years ago
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆70Mar 17, 2024Updated 2 years ago
- Notes from my "Implementing a Kick-Butt Training Program: Blue Team GO!" talk☆15Mar 4, 2019Updated 7 years ago
- Fix acquired .evt - Windows Event Log files (Forensics)☆18Mar 29, 2016Updated 10 years ago
- Attacking and defending web and VPN session hijacking in Pulse Secure Connect☆14Oct 24, 2019Updated 6 years ago