DFIR Reference
☆11Jul 30, 2026Updated 2 months ago
Alternatives and similar repositories for dfir-scripts.github.io
Users that are interested in dfir-scripts.github.io are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Queries for parsed spotlight database in sqlite☆13Dec 29, 2020Updated 5 years ago
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- My Linux profiles built for Volatility 2/3☆11Oct 11, 2025Updated last year
- Tools for macOS Forensic Bootable media☆16May 20, 2020Updated 6 years ago
- Information about the open-source-dfir slack community☆29Jun 17, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across…☆19Oct 7, 2026Updated 3 weeks ago
- Splunk Queries for SOC Analyst☆17Jan 25, 2024Updated 2 years ago
- ToolShell scanner - CVE-2025-53770 and detection information☆18Jul 30, 2026Updated 2 months ago
- ☆24Sep 7, 2026Updated last month
- python framework to parse logs for IR☆15May 2, 2021Updated 5 years ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- ☆16Jun 16, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆38Jul 12, 2023Updated 3 years ago
- PortScanner for network☆10Jul 3, 2026Updated 3 months ago
- Two-way messaging between pi coding-agent and Claude Code sessions — appear in each other's /list-agents and message in real time.☆17Aug 8, 2026Updated 2 months ago
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆53Jun 13, 2026Updated 4 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- LILO based Pulse Secure appliance disk image decryptor☆13Mar 20, 2024Updated 2 years ago
- ☆13Jun 26, 2023Updated 3 years ago
- AI-maintained security annotations for code. Continuous threat modeling, enforced in CI.☆19Updated this week
- DeepProbe - Memory Forensics Framework☆16May 16, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS (CVE-2023-31497).☆19Oct 30, 2023Updated 2 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆25Feb 17, 2026Updated 8 months ago
- Valhuntir SIFT platform — MCP servers, gateway, Examiner Portal☆19Oct 21, 2026Updated last week
- Visualize Leetcode Solutions☆14Jul 13, 2025Updated last year
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- Neural network RDP cache reconstruction tool☆36May 21, 2026Updated 5 months ago
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆33Jul 28, 2026Updated 3 months ago
- ☆24Mar 12, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Carve file metadata from NTFS index ($I30) attributes☆76May 25, 2026Updated 5 months ago
- Thanks to @d35ha☆12Aug 16, 2021Updated 5 years ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago
- A lightweight tool to view, search and analyze registry hives☆20Sep 24, 2026Updated last month
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- NRefactory - Refactoring Your C# Code☆16Apr 9, 2026Updated 6 months ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago