cisagov / CHIRPLinks
A DFIR tool written in Python.
☆1,052Updated 4 years ago
Alternatives and similar repositories for CHIRP
Users that are interested in CHIRP are comparing it to the libraries listed below
Sorting:
- GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]☆1,504Updated last year
- Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 en…☆1,426Updated 2 years ago
- Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysi…☆1,285Updated 2 years ago
- Understand adversary tradecraft and improve detection strategies☆714Updated 2 years ago
- Tracking interesting Linux (and UNIX) malware. Send PRs☆1,193Updated 4 months ago
- ☆435Updated 3 years ago
- CrackQ: A Python Hashcat cracking queue system☆938Updated last year
- ☆561Updated 2 years ago
- ☆633Updated 2 years ago
- A Simple Ransomware Vaccine☆969Updated last year
- Storage Explorer - Publicly open storage viewer (Amazon S3 Bucket, Azure Blob, FTP server, HTTP Index Of/)☆449Updated last year
- The SOC Analysts all-in-one CLI tool to automate and speed up workflow.☆1,427Updated 11 months ago
- ☆320Updated 4 years ago
- Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...☆1,086Updated last year
- NMAP Vulnerability Scanning Scripts☆628Updated 3 years ago
- An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments…☆1,727Updated 3 months ago
- Indicators of Compromise from Amnesty International's cyber investigations☆1,618Updated 9 months ago
- SunBurst DGA Decode Script☆207Updated 4 years ago
- Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull …☆1,216Updated this week
- Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for…☆934Updated 2 years ago
- Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.☆1,002Updated this week
- Contact: CRT@crowdstrike.com☆741Updated 2 years ago
- Digital Forensics Investigation Platform☆845Updated 11 months ago
- Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.☆1,245Updated last year
- Collect information of Windows PC when doing incident response☆252Updated 2 years ago
- A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE☆802Updated last year
- Microsoft Threat Intelligence Security Tools☆1,895Updated this week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,282Updated last month
- Guidance for mitigating obsolete Transport Layer Security configurations. #nsacyber☆272Updated 4 years ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆854Updated 3 years ago