docker-forensics-toolkit / toolkit
A toolkit for the post-mortem examination of Docker containers from forensic HDD copies
☆98Updated last year
Alternatives and similar repositories for toolkit:
Users that are interested in toolkit are comparing it to the libraries listed below
- Forensic Artifact Collection Tool Matrix☆83Updated 4 months ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆95Updated last year
- BlackBerry Threat Research & Intelligence☆98Updated last year
- Incident Response documents and tooling☆69Updated last year
- Logbook for Digital Forensics and Incident Response☆50Updated 8 months ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆68Updated last year
- ☆67Updated 3 months ago
- A python script developed to process Windows memory images based on triage type.☆261Updated last year
- ☆6Updated 5 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆84Updated last month
- The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the hos…☆30Updated 3 years ago
- Initial triage of Windows Event logs☆96Updated 9 months ago
- ☆67Updated last month
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆114Updated last year
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆52Updated last year
- Harness the power of Splunk for your investigations☆94Updated last week
- This repo is where I store my Threat Hunting ideas/content☆87Updated last year
- ☆86Updated last year
- Digital Forensics Artifacts Knowledge Base☆80Updated 10 months ago
- A GeoIP lookup utility utilizing ipinfo.io services.☆86Updated last year
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Updated last year
- A repository of my own Sigma detection rules.☆157Updated 6 months ago
- A curated list of KAPE-related resources☆164Updated last week
- Blueteam operational triage registry hunting/forensic tool.☆145Updated last year
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆108Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆153Updated 10 months ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (EXT4, XFS) journals (not systemd-journald), generates…☆58Updated 2 weeks ago
- Remote access and Antivirus Logging Database☆42Updated 11 months ago
- A repository to share publicly available Velociraptor detection content☆138Updated this week
- acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.☆99Updated 2 weeks ago