Alternatives and similar repositories for hashr

Users that are interested in hashr are comparing it to the libraries listed below

• codeyourweb / irma
  enpoint detection / live analysis & sandbox host / signatures quality test
  ☆44Updated 4 years ago
• google / osdfir-infrastructure
  Helm charts for running open source digital forensic tools in Kubernetes
  ☆102Updated last week
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆107Updated last year
• openrelik / openrelik-server
  The core backend server handling API requests and task management
  ☆43Updated 2 weeks ago
• cado-security / rip_raw
  Rip Raw is a small tool to analyse the memory of compromised Linux systems.
  ☆131Updated 3 years ago
• CrowdStrike / gofalcon
  Golang-based SDK to CrowdStrike's APIs
  ☆71Updated last week
• NextronSystems / CyberChef
  CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition
  ☆64Updated 2 years ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆77Updated 2 years ago
• mnrkbys / fjta
  FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…
  ☆76Updated this week
• hashlookup / hashlookup-forensic-analyser
  Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https…
  ☆126Updated last year
• invoke-eric / jupyter
  Jupyter Notebooks for Cyber Threat Intelligence
  ☆35Updated last year
• Velocidex / evtx
  Golang Parser for Microsoft Event Logs
  ☆104Updated last week
• Cisco-Talos / osquery_queries
  Cisco Orbital - Osquery queries by Talos
  ☆134Updated 10 months ago
• bradleyjkemp / sigma-go
  A Go implementation and parser for Sigma rules.
  ☆88Updated last month
• google / dfiq
  DFIQ is a collection of investigative questions and the approaches for answering them
  ☆284Updated 5 months ago
• blackberry / threat-research-and-intelligence
  BlackBerry Threat Research & Intelligence
  ☆98Updated last year
• CybercentreCanada / assemblyline-base
  Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)
  ☆69Updated last week
• Velocidex / SQLiteHunter
  Hunt for SQLite files used by various applications
  ☆26Updated this week
• Censys-Research / censeye
  ☆146Updated last month
• fox-it / dissect.target
  The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…
  ☆68Updated this week
• theflakes / Linux_Forensic_Harvester
  Harvest Linux forensic data for operational triage of an event.
  ☆51Updated last year
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆113Updated 9 months ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆79Updated last month
• JPCERTCC / jpcert-yara
  JPCERT/CC public YARA rules repository
  ☆110Updated 7 months ago
• google / permhash
  ☆43Updated last year
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• KaanSK / go-epss
  A Golang library for interacting with the EPSS (Exploit Prediction Scoring System).
  ☆28Updated 4 months ago
• blacklotuslabs / IOCs
  IOCs published by Black Lotus Labs
  ☆121Updated last month
• runreveal / sigmalite
  ☆44Updated 3 months ago
• bartblaze / FARA
  Repository that contains a set of purposefully erroneous Yara rules.
  ☆52Updated last year