Alternatives and similar repositories for dfrws2023-challenge

Users that are interested in dfrws2023-challenge are comparing it to the libraries listed below

• fboldewin / YARA_Detection_Engineering
  Detection Engineering with YARA
  ☆86Updated last year
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆78Updated 2 years ago
• 100DaysofYARA / 2024
  Rules shared by the community from 100 Days of YARA 2024
  ☆86Updated 11 months ago
• Neo23x0 / YARA-Style-Guide
  A specification and style guide for YARA rules
  ☆63Updated last year
• docker-forensics-toolkit / toolkit
  A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
  ☆106Updated last year
• swisscom / ArtifactCollectionMatrix
  Forensic Artifact Collection Tool Matrix
  ☆91Updated last year
• solomonsonya / Xavier_MemoryAnalysis_Framework
  Xavier Framework is a user interface wrapper built on top of the Volatility(c) memory forensics framework.
  ☆46Updated 3 years ago
• dfir-scripts / siftgrab
  ☆67Updated last month
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆98Updated this week
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated last month
• blueteam0ps / memOptix
  A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
  ☆97Updated 2 years ago
• SOLVE-IT-DF / solve-it
  The SOLVE-IT knowledge base for digital forensics
  ☆56Updated last week
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆99Updated 2 years ago
• fox-it / acquire
  acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
  ☆112Updated last week
• 0xHasanM / regexplore
  Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite
  ☆17Updated 2 years ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• xophidia / DFIR_Linux_Collector
  The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…
  ☆32Updated 3 years ago
• Neo23x0 / YARA-Performance-Guidelines
  A guide on how to write fast and memory friendly YARA rules
  ☆161Updated 10 months ago
• ANSSI-FR / AnoMark
  Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", …
  ☆83Updated last year
• cocopollo / HunterM
  macOS Artifacts
  ☆33Updated 9 months ago
• stuxnet999 / EventTranscriptParser
  Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)
  ☆65Updated 2 years ago
• SentineLabs / SentinelLabs_RevCore_Tools
  The Windows Malware Analysis Reversing Core Tools
  ☆97Updated 5 years ago
• openrelik / openrelik-server
  The core backend server handling API requests and task management
  ☆54Updated 2 weeks ago
• telekom-security / malware_analysis
  This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.
  ☆119Updated 2 years ago
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆150Updated last year
• TactiKoolSec / OTHF
  Open Threat Hunting Framework
  ☆121Updated 2 years ago
• Yamato-Security / hayabusa-sample-evtx
  Sample evtx files to use for testing hayabusa detection rules
  ☆63Updated last month
• plonxyz / 4n6pi
  ☆21Updated 2 months ago
• Neo23x0 / yaraQA
  YARA rule analyzer to improve rule quality and performance
  ☆107Updated 8 months ago
• dwmetz / MalChela
  A YARA & Malware Analysis Toolkit written in Rust.
  ☆84Updated 2 months ago