Alternatives and similar repositories for cloud-forensics-utils

Users that are interested in cloud-forensics-utils are comparing it to the libraries listed below

• panther-labs / panther-analysis
  Built-in Panther detection rules and policies
  ☆436Updated this week
• 0x4D31 / detection-and-response-pipeline
  ✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The …
  ☆287Updated 2 years ago
• google / dfiq
  DFIQ is a collection of investigative questions and the approaches for answering them
  ☆299Updated last year
• elastic / dorothy
  ☆192Updated last week
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆338Updated last week
• center-for-threat-informed-defense / attack-control-framework-mappings
  🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept…
  ☆497Updated last year
• chronicle / detection-rules
  Collection of example YARA-L rules for use within Google Security Operations
  ☆471Updated 2 months ago
• atc-project / atc-react
  A knowledge base of actionable Incident Response techniques
  ☆661Updated 3 years ago
• cado-security / varc
  Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…
  ☆253Updated last year
• center-for-threat-informed-defense / security-stack-mappings
  🚨ATTENTION🚨 The Security Stack Mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is k…
  ☆389Updated last year
• redcanaryco / surveyor
  A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
  ☆255Updated 10 months ago
• invictus-ir / ALFA
  ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…
  ☆171Updated last week
• google / turbinia
  Automation and Scaling of Digital Forensics Tools
  ☆780Updated 3 weeks ago
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆426Updated last year
• dlcowen / sansfor509
  Public script from SANS FOR509 Enterprise Cloud Incident Response
  ☆218Updated 3 months ago
• mitre-attack / attack-datasources
  This content is analysis and research of the data sources currently listed in ATT&CK.
  ☆414Updated 2 years ago
• jatrost / awesome-detection-rules
  This is a collection of threat detection rules / rules engines that I have come across.
  ☆296Updated last year
• awslabs / aws-automated-incident-response-and-forensics
  ☆401Updated 2 years ago
• SigmaHQ / pySigma
  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)
  ☆522Updated last week
• k-bailey / detection-engineering-maturity-matrix
  ☆99Updated 3 years ago
• Kirtar22 / ThreatHunting_with_Osquery
  Threat Hunting & Incident Investigation with Osquery
  ☆216Updated 3 years ago
• sublime-security / sublime-rules
  Sublime rules for email attack detection, prevention, and threat hunting.
  ☆344Updated last week
• Neo23x0 / BlueLedger
  A list of my personal projects
  ☆178Updated 3 years ago
• swimlane / pyattck
  A Python package to interact with the Mitre ATT&CK Framework
  ☆477Updated 2 years ago
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆289Updated 2 years ago
• dfirtrack / dfirtrack
  DFIRTrack - The Incident Response Tracking Application
  ☆532Updated 3 weeks ago
• ReversecLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆601Updated last year
• splunk / attack_data
  A repository of curated datasets from various attacks
  ☆722Updated last week
• redcanaryco / chain-reactor
  Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.
  ☆330Updated 9 months ago
• OTRF / Blacksmith
  Building environments to replicate small networks and deploy applications
  ☆331Updated 3 weeks ago