ciphertechsolutions / IO

Related projects: ⓘ

• pstirparo / utils
  Different DFIR and CTI utilities
  ☆35Updated 4 years ago
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆111Updated 3 years ago
• blackbagtech / sleuthkit-APFS
  A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.
  ☆26Updated 4 years ago
• dlcowen / dfirwizard
  Example programs used in the automating DFIR series
  ☆64Updated 5 years ago
• forensicmatt / PancakeViewer
  A DFVFS Backed Forensic Viewer
  ☆38Updated 4 years ago
• Concinnity-Risks / LogisticalBudget
  This project contains code for comparing or ranking APT capabilities and operational capacity. The metrics are meant to quantify, rank, o…
  ☆35Updated 5 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆54Updated 3 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 6 years ago
• aff4 / Standard
  AFF4 Standard Documents
  ☆25Updated 2 years ago
• ralphje / imagemounter
  Command line utility and Python package to ease the (un)mounting of forensic disk images
  ☆116Updated last year
• mdegrazia / OnionPeeler
  Python script to batch query the Tor Relays and Bridges
  ☆36Updated 5 years ago
• rjhansen / nsrlsvr
  ☆82Updated last year
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 3 years ago
• MatthewClarkMay / fTriage
  Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.
  ☆21Updated 5 years ago
• sfakiana / FIRST-CTI-2019
  References for FIRST CTI 2019 Symposium presentation
  ☆23Updated 5 years ago
• mitre / caldera-agent
  ☆20Updated 6 years ago
• IRATEAU / sam-bot
  Bot to create MISP events from data in Slack
  ☆17Updated 8 months ago
• devgc / EventMonkey
  A Windows Event Processing Utility
  ☆46Updated 6 years ago
• dfirence / demos
  ☆16Updated this week
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated last year
• davidpany / CDPO
  CDPO is a tool to validate, de-duplicate, combine, query, and encrypt track data recovered from a breach.
  ☆15Updated 7 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆50Updated 3 years ago
• MISP / mail_to_misp
  Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.
  ☆67Updated 10 months ago
• hannuvisti / forge
  ForGe Forensic test image generator
  ☆33Updated 9 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆61Updated 9 years ago
• ExabeamLabs / Synopsis
  Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.
  ☆20Updated 5 years ago
• jtmoran / parseRS
  Parses IE's Automatic Crash Recovery Files
  ☆16Updated 7 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆72Updated 11 years ago
• KPN-CISO / AttackMatrix
  AttackMatrix is a Python module and/or webpage to interact with and explore MITRE's ATT&CK's matrices.
  ☆17Updated last year
• certsocietegenerale / fame_modules
  Community modules for FAME
  ☆63Updated 2 weeks ago