Alternatives and similar repositories for DFIR-Toolkit

Users that are interested in DFIR-Toolkit are comparing it to the libraries listed below

• MazX0p / ThreatHound
  ☆160Updated 2 years ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆252Updated 3 months ago
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆157Updated 9 months ago
• splunk / ShellSweep
  ShellSweeping the evil.
  ☆181Updated last year
• Sh1n0g1 / z9
  PowerShell Script Analyzer
  ☆70Updated 2 years ago
• yarox24 / EvtxHussar
  Initial triage of Windows Event logs
  ☆106Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆143Updated last week
• TH3xACE / EDR-Test
  Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
  ☆155Updated 2 years ago
• keydet89 / RegRipper4.0
  RegRipper4.0
  ☆81Updated 2 months ago
• pr0xylife / Pikabot
  ☆32Updated last year
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆155Updated last week
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆73Updated last year
• malienist / lupo
  Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation
  ☆105Updated 3 years ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆37Updated 8 months ago
• alex-cart / LEAF
  Linux Evidence Acquisition Framework
  ☆119Updated last year
• herbiezimmerman / Windows-Event-Logs-With-Event-IDs
  A running list of Windows sources and the related event ids.
  ☆19Updated 2 years ago
• LOLAD-Project / LOLAD-Project.github.io
  https://lolad-project.github.io/
  ☆84Updated last year
• eSentire / iocs
  ☆54Updated last week
• pr0xylife / Emotet
  IOC Collection 2022
  ☆57Updated 2 years ago
• joeavanzato / crackdown
  Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.
  ☆17Updated 2 years ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆123Updated 9 months ago
• sk4la / volatility3-docker
  Volatility, on Docker 🐳
  ☆41Updated 2 months ago
• skandler / simulate-akira
  Simulation of Akira Ransomware with Invoke-AtomicTest
  ☆18Updated last year
• pr0xylife / Qakbot
  ☆194Updated 2 years ago
• jgasmussen / Linux-Baseline-and-Forensic-Triage-Tool
  Linux Baseline and Forensic Triage Tool - BETA
  ☆57Updated 3 years ago
• rapid7 / Rapid7-Labs
  Rapid7 Labs operates as the division of Rapid7 focused on threat research. It is renowned for providing comprehensive threat intelligence…
  ☆76Updated last month
• pan-unit42 / Wireshark-quizzes
  Packet captures of malicious traffic for analysis using Wireshark
  ☆64Updated 2 years ago
• vm32 / Digital-Forensics-Script-for-Linux
  Advanced Bash script designed for conducting digital forensics on Linux systems
  ☆144Updated last year
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆133Updated 2 years ago
• archcloudlabs / HackSpaceCon_Malware_Analysis_Course
  Free training course offered at Hack Space Con 2023
  ☆138Updated 2 years ago