Alternatives and similar repositories for GiftStick:

Users that are interested in GiftStick are comparing it to the libraries listed below

• att / docker-forensics
  Tools to assist in forensicating docker
  ☆81Updated 2 weeks ago
• teamdfir / sift-saltstack
  Salt States for Configuring the SIFT Workstation
  ☆97Updated this week
• redcanaryco / redcanary-response-utils
  Tools to automate and/or expedite response.
  ☆113Updated 6 months ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆145Updated 2 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆334Updated 2 years ago
• securityclippy / elasticintel
  Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.
  ☆140Updated last year
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆303Updated this week
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆185Updated 2 years ago
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆177Updated 5 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆66Updated 3 years ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆190Updated last month
• mvelazc0 / Oriana
  Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…
  ☆179Updated 3 years ago
• MISP / misp-cloud
  misp-cloud - Cloud-ready images of MISP
  ☆72Updated 2 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆66Updated 4 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆124Updated 9 years ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆37Updated 5 months ago
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆91Updated 5 years ago
• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆109Updated 2 months ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆36Updated 4 years ago
• msuhanov / yarp
  Yet another registry parser
  ☆130Updated 2 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆105Updated 6 years ago
• rjhansen / nsrllookup
  Checks with NSRL RDS servers looking for for hash matches
  ☆112Updated 3 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆51Updated 3 years ago
• carbonblack / cbapi-python
  Carbon Black API - Python language bindings
  ☆146Updated 4 months ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated last year
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆76Updated 3 years ago
• rkovar / splunk-hunting-helpers
  ☆55Updated 2 years ago
• keithjjones / fileintel
  A modular Python application to pull intelligence about malicious files
  ☆120Updated 4 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆109Updated 6 years ago