Alternatives and similar repositories for timesketch:

Users that are interested in timesketch are comparing it to the libraries listed below

• log2timeline / plaso
  Super timeline all the things
  ☆1,803Updated 3 weeks ago
• google / grr
  GRR Rapid Response: remote live forensics for incident response
  ☆4,859Updated 3 weeks ago
• google / turbinia
  Automation and Scaling of Digital Forensics Tools
  ☆760Updated 2 weeks ago
• yeti-platform / yeti
  Your Everyday Threat Intelligence
  ☆1,827Updated this week
• certsocietegenerale / FIR
  Fast Incident Response
  ☆1,848Updated last week
• ForensicArtifacts / artifacts
  Digital Forensics artifact repository
  ☆1,093Updated 2 months ago
• TheHive-Project / Cortex
  Cortex: a Powerful Observable Analysis and Active Response Engine
  ☆1,391Updated 4 months ago
• yampelo / beagle
  Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
  ☆1,286Updated 2 years ago
• obsidianforensics / hindsight
  Web browser forensics for Google Chrome/Chromium
  ☆1,138Updated 2 weeks ago
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,946Updated 4 years ago
• philhagen / sof-elk
  Configuration files for the SOF-ELK VM
  ☆1,568Updated last week
• activecm / rita-legacy
  Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…
  ☆2,513Updated 8 months ago
• ThreatHuntingProject / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆1,756Updated 3 years ago
• davehull / Kansa
  A Powershell incident response framework
  ☆1,590Updated 2 years ago
• Velocidex / velociraptor
  Digging Deeper....
  ☆3,164Updated this week
• JPCERTCC / LogonTracer
  Investigate malicious Windows logon by visualizing and analyzing Windows event log
  ☆2,858Updated 9 months ago
• uber-common / metta
  An information security preparedness tool to do adversarial simulation.
  ☆1,118Updated 5 years ago
• TheHive-Project / TheHive
  TheHive: a Scalable, Open Source and Free Security Incident Response Platform
  ☆3,593Updated 2 years ago
• OTRF / OSSEM
  Open Source Security Events Metadata (OSSEM)
  ☆1,260Updated 2 years ago
• target / strelka
  Real-time, container-based file scanning at enterprise scale
  ☆913Updated this week
• sans-blue-team / DeepBlueCLI
  ☆2,255Updated last year
• certsocietegenerale / IRM-deprecated
  Incident Response Methodologies
  ☆1,025Updated 6 years ago
• certtools / intelmq
  IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
  ☆1,020Updated last week
• cisagov / Malcolm
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs an…
  ☆2,079Updated this week
• microsoft / msticpy
  Microsoft Threat Intelligence Security Tools
  ☆1,825Updated last week
• Shuffle / Shuffle
  Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
  ☆1,883Updated this week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,495Updated 4 months ago
• clong / DetectionLab
  Automate the creation of a lab environment complete with security tooling and logging best practices
  ☆4,714Updated 8 months ago
• MISP / MISP
  MISP (core software) - Open Source Threat Intelligence and Sharing Platform
  ☆5,603Updated this week
• rabobank-cdc / DeTTECT
  Detect Tactics, Techniques & Combat Threats
  ☆2,126Updated last month