This is a repo for cybersecurity analyst collecting artifacts in a incident response case.
☆23Feb 17, 2025Updated last year
Alternatives and similar repositories for DFIR-Toolkit
Users that are interested in DFIR-Toolkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rapid DFIR Triage Collection Tool For Windows, Mac and Linux☆11May 23, 2025Updated last year
- Open source tool for static analysis of malwares.☆33Jul 10, 2020Updated 6 years ago
- Create an incident response triage toolkit for use with Windows or Linux.☆18Jun 14, 2020Updated 6 years ago
- AutoIt Analysis Library: Parser & Emulator For Malware Researchers☆23Apr 27, 2019Updated 7 years ago
- A fork of the evtx Rust crate for Hayabusa☆15Oct 8, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows Privilege Escalation☆18Jun 11, 2022Updated 4 years ago
- Windows Forensics Salt States☆23Updated this week
- ☆37Aug 18, 2019Updated 7 years ago
- Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIE…☆35Oct 22, 2026Updated last week
- Valhuntir CLI — AI-augmented incident response platform☆144Oct 21, 2026Updated last week
- A python polymorphic engine for C programs☆11Dec 8, 2023Updated 2 years ago
- Some Awesome and Simple CVE☆12Feb 25, 2023Updated 3 years ago
- ☆24Sep 7, 2026Updated last month
- Distributed Nmap, wrapper around Nmap to allow distributed network enumeration.☆21Oct 20, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Fuzzing with the generated argument and environment variable☆10Jul 14, 2022Updated 4 years ago
- Exploit ConnectWise ScreenConnect (bypass authentication)☆12Feb 21, 2024Updated 2 years ago
- This project is used for scanning cve-2020-0796 SMB vulnerability☆14Mar 12, 2020Updated 6 years ago
- Web based user interface for OpenRelik☆13Jun 21, 2026Updated 4 months ago
- An MCP server for Hyper-V VM management and guest execution☆16May 13, 2026Updated 5 months ago
- This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.☆15Jul 13, 2023Updated 3 years ago
- ☆10Nov 27, 2021Updated 4 years ago
- Zrax: Rust and WebAssembly ISA classification, entropy maps, and binary analysis workbench☆15Updated this week
- NDISPktScan is a plugin for the Volatility Framework. It parses the Ethernet packets stored by ndis.sys in Windows kernel space memory.☆12Oct 23, 2015Updated 11 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆15Nov 4, 2024Updated last year
- ☆13Jan 3, 2021Updated 5 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- Build tools to generate vagrant images used by metasploit-framework CI☆13Dec 16, 2025Updated 10 months ago
- Miscellaneous Scripts☆17Sep 11, 2020Updated 6 years ago
- BBC Micro:Bit BTLE sniffing proof of concept☆10Dec 27, 2017Updated 8 years ago
- Tutorial for Writing a Kernel☆10Jun 5, 2022Updated 4 years ago
- 针对 Java 幽灵比特位漏洞的 WAF 绕过辅助工具，支持敏感字符替换、payload 编码与命令生成，帮助快速突破文件读取场景的安全过滤限制。☆25Apr 29, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library☆177Oct 25, 2024Updated 2 years ago
- Sneak is URL transfer tool based on Tor and Curl.☆13Dec 6, 2018Updated 7 years ago
- A specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor looku…☆13Oct 7, 2026Updated 3 weeks ago
- AI-powered CTF solving workstation for agents to race or collaborate on challenges☆18Jun 13, 2026Updated 4 months ago
- F-Secure Lightweight Acqusition for Incident Response (FLAIR)☆16Jul 5, 2021Updated 5 years ago
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Ring -2 (SMM/Plouton) + Ring Infinity (FPGA DMA) anti-cheat evasion research. Field-tested. MIT License.☆27Apr 30, 2026Updated 6 months ago