Alternatives and similar repositories for dfxml_python:

Users that are interested in dfxml_python are comparing it to the libraries listed below

• 3c7 / common-osint-model
  Converting data from services like Censys and Shodan to a common data model
  ☆49Updated 5 months ago
• forensicmatt / PancakeViewer
  A DFVFS Backed Forensic Viewer
  ☆40Updated 4 years ago
• 00010111 / gMetaDataParse
  ☆20Updated last year
• jankais3r / Forensic-Version-Checker
  Script that checks for available updates for the most commonly used Digital Forensics tools
  ☆58Updated 4 years ago
• 4n6ist / bulk_extractor-rec
  It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving
  ☆40Updated 4 years ago
• zerber0s / mac_int
  macOS Artifact Intelligence Tool
  ☆13Updated 5 years ago
• AndrewRathbun / Anti-Forensics-VHDX
  A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…
  ☆25Updated 2 years ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆31Updated last year
• open-source-dfir / slack
  Information about the open-source-dfir slack community
  ☆28Updated last year
• dwmetz / PSHero
  PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
  ☆36Updated last year
• MattETurner / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆50Updated 7 months ago
• MISP / misp-training-lea
  Practical Information Sharing between Law Enforcement and CSIRT communities using MISP
  ☆31Updated last year
• curated-intel / attack-lookup
  A MITRE ATT&CK Lookup Tool
  ☆45Updated 10 months ago
• BushidoUK / Malware-Zoo
  Hashes of infamous malware
  ☆25Updated last year
• op7ic / unix_collector
  unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Andro…
  ☆32Updated 2 months ago
• cudeso / dfir-iris-misp-timesketch
  Scripts to integrate DFIR-IRIS, MISP and TimeSketch
  ☆33Updated 3 years ago
• ruppde / yara_rules
  Yara rules
  ☆20Updated last year
• cyberg3cko / elrond
  Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
  ☆32Updated last month
• AbdulRhmanAlfaifi / CryptnetURLCacheParser
  CryptnetURLCacheParser is a tool to parse CryptAPI cache files
  ☆16Updated 7 months ago
• aff4 / pyaff4
  The Python implementation of the AFF4 standard.
  ☆45Updated 10 months ago
• AyoobAli / ransomwatch-cli
  CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd
  ☆12Updated 2 years ago
• ForensicArtifacts / artifacts-kb
  Digital Forensics Artifacts Knowledge Base
  ☆77Updated 9 months ago
• stairwell-inc / threat-research
  Repository of tools, YARA rules, and code-snippets from Stairwell's research team.
  ☆22Updated last year
• Hestat / calamity
  A script to assist in processing forensic RAM captures for malware triage
  ☆27Updated 4 years ago
• gmagklaras / POFR
  Penguin OS Forensic (or Flight) Recorder
  ☆39Updated 2 months ago
• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 9 months ago
• 3c7 / bazaar
  Python based CLI for MalwareBazaar
  ☆36Updated 4 months ago
• Silv3rHorn / autoripy
  Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
  ☆13Updated 6 months ago
• nccgroup / MetadataPlus
  A tool to use novel locations to extract metadata from Office documents.
  ☆62Updated last year
• tap-ir / tapir
  TAPIR is a multi-user, client/server, incident response framework
  ☆44Updated 2 years ago