google / GiftStick
1-Click push forensics evidence to the cloud
☆139Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for GiftStick
- Invoke-LiveResponse☆145Updated 2 years ago
- InvestigationPlaybookSpec☆72Updated 7 years ago
- Salt States for Configuring the SIFT Workstation☆96Updated this week
- Tools for the Computer Incident Response Team☆142Updated 7 years ago
- Tools to assist in forensicating docker☆80Updated last month
- Tools to automate and/or expedite response.☆113Updated 4 months ago
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆177Updated 3 years ago
- A framework for orchestrating forensic collection, processing and data export☆296Updated this week
- All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns☆65Updated 3 years ago
- A rewrite of mactime, a bodyfile reader☆36Updated 3 months ago
- Threat Feed Aggregation, Made Easy☆166Updated 4 years ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆334Updated 2 years ago
- A modern Python-3-based alternative to RegRipper☆187Updated 2 weeks ago
- Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…☆136Updated 2 years ago
- Security Monitoring Resolution Categories☆138Updated 2 years ago
- Threat Alert Logic Repository☆89Updated 5 years ago
- Extract common Windows artifacts from source images and VSCs☆65Updated 3 years ago
- Slides and Other Resources from my latest Talks and Presentations☆24Updated 3 years ago
- Main Build directory☆177Updated 5 years ago
- A collection of notebooks built for defensive and offensive operations.☆76Updated 4 years ago
- Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.☆104Updated 6 years ago
- Page File analysis tools.☆124Updated 8 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 5 years ago
- A Splunk app to use MISP in background☆109Updated 3 weeks ago
- Windows Live Artifacts Acquisition Script☆183Updated 2 years ago
- Expert Investigation Guides☆50Updated 3 years ago
- stoQ Public Plugins☆71Updated last year
- Yet another registry parser☆130Updated 2 years ago
- automate your MISP installs☆66Updated 4 years ago
- PowerShell No Agent Hunting☆108Updated 6 years ago