forensicanalysis / artifactcollector
🧭 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
☆270Updated last month
Related projects ⓘ
Alternatives and complementary repositories for artifactcollector
- A python script developed to process Windows memory images based on triage type.☆258Updated 11 months ago
- Live forensic artifacts collector☆160Updated 4 months ago
- Rules generated from our investigations.☆189Updated 3 weeks ago
- A curated list of KAPE-related resources☆156Updated 6 months ago
- This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole …☆193Updated 4 years ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆270Updated 2 months ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆555Updated last week
- Threat Hunting & Incident Investigation with Osquery☆198Updated 2 years ago
- A framework for orchestrating forensic collection, processing and data export☆296Updated this week
- A toolkit for the post-mortem examination of Docker containers from forensic HDD copies☆94Updated 9 months ago
- an excel-centric approach for the MITRE ATT&CK® Tactics and Techniques☆181Updated 2 years ago
- Digital Forensics Artifacts Knowledge Base☆75Updated 6 months ago
- The Volatility Collaborative GUI☆227Updated this week
- Pointing cybersecurity teams to thousands of detection rules and offensive security tests aligned with common attacker techniques☆123Updated 8 months ago
- Repository of attack and defensive information for Business Email Compromise investigations☆230Updated 2 months ago
- Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques☆308Updated 5 months ago
- OSSEM Detection Model☆168Updated 2 years ago
- SIEGMA - Transform Sigma rules into SIEM consumables☆141Updated last year
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆680Updated last week
- A repository of my own Sigma detection rules.☆156Updated 2 months ago
- Docker image for Velocidex Velociraptor☆113Updated 4 months ago
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆528Updated 2 months ago
- Repository of public reference frameworks for the DFIR community.☆109Updated last year
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆194Updated 2 years ago
- Artifact collection tool for *nix systems☆192Updated 8 months ago
- Resources To Learn And Understand SIGMA Rules☆168Updated last year
- Sigma rules from Joe Security☆203Updated 2 weeks ago
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆182Updated this week
- ☆130Updated 9 months ago