Alternatives and similar repositories for GiftStick

Users that are interested in GiftStick are comparing it to the libraries listed below

• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆148Updated 3 years ago
• Yara-Rules / yara-endpoint
  Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
  ☆109Updated 7 years ago
• target / halogen
  Automatically create YARA rules from malicious documents.
  ☆211Updated 3 years ago
• Foundstone / InvestigationPlaybookSpec
  InvestigationPlaybookSpec
  ☆72Updated 7 years ago
• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 3 years ago
• redcanaryco / redcanary-response-utils
  Tools to automate and/or expedite response.
  ☆115Updated 10 months ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆37Updated 5 years ago
• PUNCH-Cyber / stoq-plugins-public
  stoQ Public Plugins
  ☆71Updated 2 years ago
• da667 / AutoMISP
  automate your MISP installs
  ☆68Updated 4 years ago
• att / docker-forensics
  Tools to assist in forensicating docker
  ☆83Updated 2 months ago
• airbus-cert / regrippy
  A modern Python-3-based alternative to RegRipper
  ☆195Updated 2 months ago
• airbus-cert / timeliner
  A rewrite of mactime, a bodyfile reader
  ☆37Updated 9 months ago
• opensourcesec / CIRTKit
  Tools for the Computer Incident Response Team
  ☆143Updated 8 years ago
• Neo23x0 / ti-falsepositives
  A collection of typical false positive indicators
  ☆55Updated 4 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆337Updated 2 years ago
• Silv3rHorn / ArtifactExtractor
  Extract common Windows artifacts from source images and VSCs
  ☆65Updated 4 years ago
• mvelazc0 / Oriana
  Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…
  ☆180Updated 3 years ago
• giMini / NOAH
  PowerShell No Agent Hunting
  ☆110Updated 7 years ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 3 years ago
• remg427 / misp42splunk
  A Splunk app to use MISP in background
  ☆110Updated last week
• aboutsecurity / Talks-and-Presentations
  Slides and Other Resources from my latest Talks and Presentations
  ☆24Updated 4 years ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆315Updated last week
• andreafortuna / autotimeliner
  Automagically extract forensic timeline from volatile memory dump
  ☆130Updated last year
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• ReconInfoSec / rhq
  Recon Hunt Queries
  ☆77Updated 4 years ago
• CrowdStrike / CrowdFMS
  CrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by lever…
  ☆128Updated 6 years ago
• sbousseaden / YaraHunts
  Random hunting ordiented yara rules
  ☆96Updated 2 years ago
• keydet89 / Tools
  Tools from WFA 4/e, timeline tools, etc.
  ☆140Updated last year
• unfetter-discover / unfetter-analytic
  Main Build directory
  ☆179Updated 6 years ago
• mnrkbys / vss_carver
  Carves and recreates VSS catalog and store from Windows disk image.
  ☆98Updated 2 years ago