Alternatives and similar repositories for dfrws2023-challenge

Users that are interested in dfrws2023-challenge are comparing it to the libraries listed below

• swisscom / ArtifactCollectionMatrix
  Forensic Artifact Collection Tool Matrix
  ☆90Updated 10 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆78Updated 2 years ago
• dwmetz / MalChela
  A YARA & Malware Analysis Toolkit written in Rust.
  ☆50Updated this week
• fboldewin / YARA_Detection_Engineering
  Detection Engineering with YARA
  ☆87Updated last year
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 9 months ago
• solomonsonya / Xavier_MemoryAnalysis_Framework
  Xavier Framework is a user interface wrapper built on top of the Volatility(c) memory forensics framework.
  ☆45Updated 3 years ago
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆89Updated last week
• docker-forensics-toolkit / toolkit
  A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
  ☆104Updated last year
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆56Updated last year
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆99Updated last year
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated 9 months ago
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆97Updated 2 years ago
• dfir-scripts / siftgrab
  ☆68Updated 2 weeks ago
• xophidia / DFIR_Linux_Collector
  The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…
  ☆32Updated 3 years ago
• Yamato-Security / hayabusa-sample-evtx
  Sample evtx files to use for testing hayabusa detection rules
  ☆60Updated 11 months ago
• fox-it / acquire
  acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
  ☆108Updated this week
• openrelik / openrelik-server
  The core backend server handling API requests and task management
  ☆48Updated last week
• bartblaze / FARA
  Repository that contains a set of purposefully erroneous Yara rules.
  ☆59Updated 2 months ago
• JPCERTCC / MemoryForensic-on-Cloud
  Memory Forensic System on Cloud
  ☆91Updated last year
• mitre / emu
  This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense
  ☆32Updated last week
• abaghinyan / Aralez
  Aralez is a triage tool for Windows and Linux that automates the collection of system information, network/process data, and files.
  ☆20Updated this week
• Hexastrike / EventWhisper
  A Windows Event Log MCP
  ☆37Updated last month
• alatif113 / mitre_attck_heatmap
  ☆18Updated 9 months ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆35Updated 4 months ago
• korniko98 / pivot-atlas
  ☆96Updated 2 months ago
• rapid7 / Rapid7-Labs
  Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…
  ☆71Updated 3 months ago
• ANSSI-FR / AnoMark
  Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …
  ☆84Updated last year
• opencybersecurityalliance / oca-iob
  Augmentation to Machine Readable CTI
  ☆34Updated 3 weeks ago
• ConnorShride / box-ps
  Powershell sandboxing utility
  ☆19Updated last week
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year