codeyourweb / fastfinderLinks
Incident Response - Fast suspicious file finder
☆242Updated 3 years ago
Alternatives and similar repositories for fastfinder
Users that are interested in fastfinder are comparing it to the libraries listed below
Sorting:
- Live forensic artifacts collector☆166Updated 11 months ago
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆717Updated 2 months ago
- ☆195Updated last year
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆313Updated 3 weeks ago
- Digital forensic acquisition tool for Windows based incident response.☆341Updated last year
- This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …☆202Updated 4 years ago
- Curated Windows event log Sigma rules used in Hayabusa and Velociraptor.☆180Updated this week
- Threat Hunting tool about Sysmon and graphs☆333Updated 2 years ago
- MAL-CL (Malicious Command-Line)☆313Updated 2 years ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆105Updated 3 years ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆154Updated 3 years ago
- Linux Evidence Acquisition Framework☆118Updated 8 months ago
- DFIRTrack - The Incident Response Tracking Application☆498Updated 9 months ago
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆166Updated 2 years ago
- ☆544Updated last year
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆615Updated 11 months ago
- Rules generated from our investigations.☆195Updated this week
- Code and yara rules to detect and analyze Cobalt Strike☆266Updated 4 years ago
- Incident Response collection and processing scripts with automated reporting scripts☆301Updated 11 months ago
- ☆160Updated last year
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆86Updated 3 years ago
- Threat Hunting queries for various attacks☆236Updated this week
- Automatically created C2 Feeds☆614Updated this week
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆240Updated 2 months ago
- yara detection rules for hunting with the threathunting-keywords project☆121Updated 3 weeks ago
- 🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system☆288Updated 3 weeks ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆576Updated last month
- Blue Team detection lab created with Terraform and Ansible in Azure.☆158Updated 6 months ago
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆133Updated last year
- Awesome VirusTotal Intelligence Search Queries☆332Updated 2 years ago