dfir-iris / iris-clientLinks
Python client for DFIR-IRIS
☆25Updated last year
Alternatives and similar repositories for iris-client
Users that are interested in iris-client are comparing it to the libraries listed below
Sorting:
- ☆14Updated last year
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆118Updated 2 years ago
- ☆54Updated last year
- Jupyter notebooks for threat hunting☆60Updated 10 months ago
- Collection of scripts provided for public use☆38Updated last week
- Repository of public reference frameworks for the DFIR community.☆121Updated 2 years ago
- An opensource sigma conversion tool built using pysigma☆157Updated 3 weeks ago
- ☆68Updated 2 months ago
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆32Updated 3 years ago
- Forensics scripts aimed at automating & enhancing the Forensics Legend Eric Zimmerman's techniques, integrating the statistical detection…☆18Updated 2 years ago
- A repository to share publicly available Velociraptor detection content☆194Updated last week
- Random notes collected on the intertubes relating to DFIR☆35Updated 2 years ago
- A repository of my own Sigma detection rules.☆163Updated 2 months ago
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆127Updated 2 years ago
- A python script developed to process Windows memory images based on triage type.☆263Updated 2 years ago
- User Feedback Space of #MitreAssistant☆38Updated 2 years ago
- Incident Response documents and tooling☆111Updated last month
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆117Updated 2 years ago
- The backend server handling API requests and task management☆55Updated this week
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆59Updated 7 months ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆77Updated last year
- Open Source Platform for storing, organizing, and searching documents related to cyber threats☆169Updated 2 years ago
- ☆28Updated 2 months ago
- Script to automate Linux live evidence collection☆28Updated 3 years ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆89Updated 11 months ago
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆55Updated 2 years ago
- Summiting the Pyramid is a research project focused on engineering cyber analytics to make adversary evasion more difficult. The research…☆55Updated this week
- A curated list of KAPE-related resources☆179Updated 9 months ago
- ☆92Updated 6 months ago
- ☆35Updated last year