devgc / ElasticHandler
Assorted classes and methods for indexing reports and retrieving information from an elastic index
☆21Updated 8 years ago
Alternatives and similar repositories for ElasticHandler:
Users that are interested in ElasticHandler are comparing it to the libraries listed below
- Log Examination Tool☆26Updated 8 years ago
- Some IR notes☆73Updated 8 years ago
- Some dfir stuff☆31Updated 3 years ago
- VirusTotal Intelligence Notification Puller☆28Updated 8 years ago
- A Windows Event Processing Utility☆46Updated 7 years ago
- ☆17Updated 7 years ago
- Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.☆38Updated 4 years ago
- Manage VT Alerts☆62Updated 8 years ago
- Automation for VirusTotal☆31Updated 8 years ago
- ☆37Updated 10 years ago
- A dumb set of scripts for building a cuckoo rig☆61Updated 7 years ago
- Recurse through a registry, identifying values with large data -- a registry malware hunter☆44Updated 8 years ago
- ☆36Updated 8 years ago
- A REST API server for yara event notifications. Mapping file hashes to yara signatures in Elasticsearch for easy hash lookup or finding h…☆19Updated 9 years ago
- Frontend for Codex Gigas☆21Updated 7 years ago
- Tool to parse SRU database☆24Updated 6 years ago
- Various scrips☆12Updated 2 years ago
- Just another tool to extract Indicator of compromise (ioc) from files☆29Updated 9 years ago
- openioc_scan Volatility Framework plugin☆42Updated 8 years ago
- PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.☆50Updated 7 years ago
- Python script to pull various IOCs from PDFs☆15Updated 10 years ago
- Various Modules & Scripts for use with Viper Framework☆27Updated 5 years ago
- Python IOC Editor☆62Updated 9 years ago
- Ponmocup Indicators of Compromise☆11Updated 9 years ago
- Example programs used in the automating DFIR series☆64Updated 5 years ago
- Scripts for dealing with various ek's☆69Updated 8 years ago
- Useful scripts, rules etc. for use with YARA☆27Updated 4 years ago
- ARCHIVED ce1sus, a threat information database ARCHIVED☆28Updated 9 years ago
- Open Development projects for TekDefense☆77Updated 8 years ago
- a Malware/Threat Analyst Desktop☆89Updated 9 years ago