Scripts to integrate DFIR-IRIS, MISP and TimeSketch
☆37Feb 2, 2022Updated 4 years ago
Alternatives and similar repositories for dfir-iris-misp-timesketch
Users that are interested in dfir-iris-misp-timesketch are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CSIRT Jump Bag☆27Apr 25, 2024Updated 2 years ago
- Elasticsearch pipelines for processing and enriching plaso data☆11Feb 6, 2024Updated 2 years ago
- Open source training materials for law-enforcement and organisations interested in DFIR.☆65May 29, 2026Updated 5 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆31May 21, 2026Updated 5 months ago
- Python client for DFIR-IRIS☆31Aug 19, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆122Oct 8, 2023Updated 3 years ago
- Setting up a training environment for MISP☆12Dec 17, 2022Updated 3 years ago
- Mass Triage Tools☆20Sep 9, 2026Updated last month
- CocktailParty is a data broker system based on phoenix framework☆23Apr 23, 2025Updated last year
- macOS Artifact Intelligence Tool☆13Apr 30, 2019Updated 7 years ago
- Different tools, koen.vanimpe@cudeso.be☆139Jul 21, 2025Updated last year
- ☆33Feb 26, 2022Updated 4 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.☆27Dec 14, 2021Updated 4 years ago
- A script to assist in processing forensic RAM captures for malware triage☆26Feb 4, 2021Updated 5 years ago
- Volatility plugin to search for all Autostart Extensibility Points (AESPs)☆10Jun 13, 2026Updated 4 months ago
- evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.☆159Nov 30, 2021Updated 4 years ago
- A Compiler from Sigma rules to VQL☆21Oct 19, 2026Updated 2 weeks ago
- ☆11Jun 18, 2024Updated 2 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 6 years ago
- Sigma rules converted for direct use with Zircolite☆15Updated this week
- PowerShell module for Office 365 and Azure log collection☆284Sep 22, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- $MFT parser (from live systems or a copy of the $MFT) and raw file copy utility☆38Jul 18, 2024Updated 2 years ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆19Jan 10, 2024Updated 2 years ago
- ☆21Oct 17, 2025Updated last year
- ☆34Oct 25, 2021Updated 5 years ago
- shell script to create an image and perform initial examination on a drive☆15Feb 28, 2020Updated 6 years ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆120Jan 26, 2022Updated 4 years ago
- Create dataset for suricata with indicators of MISP instances and add sightings in MISP if an indicator of dataset generates an alert☆37Nov 9, 2022Updated 3 years ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆76Jan 18, 2022Updated 4 years ago
- Transform EQL detection rules to VQL artifacts☆12Nov 12, 2021Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Forensics artefact collection tool for systems running Microsoft Windows☆453Oct 8, 2026Updated 3 weeks ago
- A service designed to provide users with a set of intuitive web forms for reporting various types of cyber attack to MISP.☆11Jun 4, 2025Updated last year
- service to convert nfcapd files clickhouse as they are created☆10Mar 22, 2025Updated last year
- A tool to parse Windows Master File Table ($MFT) and import them into Elasticsearch.☆12Updated this week
- The Volatility Collaborative GUI☆280Updated this week
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆40Jul 20, 2026Updated 3 months ago
- All the useful tools interesting to be used☆25Sep 20, 2022Updated 4 years ago