ekristen / cast
Cast is an installer for any compatible Saltstack based distribution like SIFT or REMnux
☆104Updated this week
Related projects ⓘ
Alternatives and complementary repositories for cast
- A curated list of KAPE-related resources☆155Updated 6 months ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆94Updated last year
- A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare …☆145Updated last month
- Windows Forensics Environment Builder☆110Updated last week
- Harness the power of Splunk for your investigations☆76Updated 2 weeks ago
- Docker image for Velocidex Velociraptor☆113Updated 4 months ago
- ☆52Updated last year
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆116Updated 11 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆75Updated 2 weeks ago
- Tools for simulating threats☆174Updated last year
- ☆56Updated last week
- Search Index Database Reporter☆89Updated this week
- ☆1Updated 2 weeks ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆63Updated last year
- Get all my software☆141Updated last month
- Powershell module for VMWare vSphere forensics☆140Updated this week
- A repository to share publicly available Velociraptor detection content☆119Updated this week
- ☆49Updated 5 months ago
- Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE☆104Updated this week
- A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhanc…☆53Updated last year
- A GeoIP lookup utility utilizing ipinfo.io services.☆83Updated 11 months ago
- Repository of public reference frameworks for the DFIR community.☆108Updated last year
- The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images☆77Updated last year
- acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.☆91Updated this week
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆268Updated 2 months ago
- Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science☆122Updated last week
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆49Updated last year
- Forensic Artifact Collection Tool Matrix☆73Updated 2 years ago
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆179Updated last month
- Remote access and Antivirus Logging Database☆41Updated 6 months ago