Alternatives and similar repositories for grr:

Users that are interested in grr are comparing it to the libraries listed below

• google / rekall
  Rekall Memory Forensic Framework
  ☆1,932Updated 4 years ago
• mozilla / MozDef
  DEPRECATED - MozDef: Mozilla Enterprise Defense Platform
  ☆2,166Updated 3 years ago
• zeek / zeek
  Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
  ☆6,579Updated this week
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,587Updated 2 years ago
• arkime / arkime
  Arkime is an open source, large scale, full packet capturing, indexing, and database system.
  ☆6,462Updated this week
• sleuthkit / sleuthkit
  The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file s…
  ☆2,676Updated this week
• Security-Onion-Solutions / security-onion
  Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
  ☆3,084Updated 3 years ago
• MISP / MISP
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  ☆5,477Updated this week
• log2timeline / plaso
  Super timeline all the things
  ☆1,759Updated 3 weeks ago
• google / timesketch
  Collaborative forensic timeline analysis
  ☆2,660Updated this week
• certsocietegenerale / FIR
  Fast Incident Response
  ☆1,766Updated last week
• gamelinux / passivedns
  A network sniffer that logs all DNS server replies for use in a passive DNS setup
  ☆1,681Updated 7 months ago
• ossec / ossec-hids
  OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, roo…
  ☆4,559Updated last week
• VirusTotal / yara
  The pattern matching swiss knife
  ☆8,463Updated this week
• viper-framework / viper
  Binary analysis and management framework
  ☆1,543Updated last year
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,058Updated this week
• volatilityfoundation / volatility
  An advanced memory forensics framework
  ☆7,462Updated last year
• mozilla / mig
  Distributed & real time digital forensics at the speed of the cloud
  ☆1,204Updated 5 years ago
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,507Updated 6 months ago
• jipegit / OSXAuditor
  OS X Auditor is a free Mac OS X computer forensics tool
  ☆3,127Updated 4 years ago
• Yelp / osxcollector
  A forensic evidence collection & analysis toolkit for OS X
  ☆1,881Updated 5 years ago
• hslatman / awesome-threat-intelligence
  A curated list of Awesome Threat Intelligence resources
  ☆8,332Updated 5 months ago
• meirwah / awesome-incident-response
  A curated list of tools for incident response
  ☆7,795Updated 6 months ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,754Updated 3 months ago
• NextronSystems / APTSimulator
  A toolset to make a system look as if it was the victim of an APT attack
  ☆2,497Updated last year
• philhagen / sof-elk
  Configuration files for the SOF-ELK VM
  ☆1,543Updated this week
• outflanknl / RedELK
  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term o…
  ☆2,405Updated 4 months ago
• clong / DetectionLab
  Automate the creation of a lab environment complete with security tooling and logging best practices
  ☆4,680Updated 6 months ago
• mitre / caldera
  Automated Adversary Emulation Platform
  ☆5,786Updated last week
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,022Updated this week