DFIR forensics companion server + capture extension
☆32Oct 14, 2026Updated last week
Alternatives and similar repositories for DFIR-Companion
Users that are interested in DFIR-Companion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Pyth…☆28Sep 28, 2026Updated 3 weeks ago
- Ungraded practice exercises for python scripting for security course.☆12Jun 22, 2025Updated last year
- Self-hosted threat intelligence platform — feed aggregation, AI triage, MITRE ATT&CK coverage, and Sentinel-integrated detection engineer…☆60Updated this week
- Disk Image Mounting Script☆14Jul 21, 2026Updated 3 months ago
- Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulat…☆32Updated this week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: …☆25Sep 18, 2026Updated last month
- Convert MISP events to Elastalert rules☆12Aug 10, 2021Updated 5 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated last year
- a-ray-grass is a yara module that provides support for DCSO-format bloom filters in yara. In the context of hashlookup, it allows quickly…☆14Aug 19, 2022Updated 4 years ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 5 months ago
- ☆13Jan 26, 2026Updated 8 months ago
- ☆49Oct 4, 2026Updated 2 weeks ago
- Linux Persistence Detection, Hunting and Artifact Collection script☆26Jul 20, 2026Updated 3 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆28Oct 14, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆19May 27, 2026Updated 4 months ago
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆66Oct 3, 2026Updated 2 weeks ago
- The static detection content for Maltrail: millions of indicators☆25Updated this week
- CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC☆33Aug 12, 2026Updated 2 months ago
- Tools for Incident Response and Malware Analysis☆11Feb 9, 2025Updated last year
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆12May 6, 2026Updated 5 months ago
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated last month
- A faithful local emulator of the Flipper BUSY Bar: mock HTTP API and live LED display. Unofficial community project.☆39Aug 13, 2026Updated 2 months ago
- A centralized repository housing comprehensive research and implementations in Low-Level Windows Internals. This lab covers the full spec…☆25Sep 3, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Process ID Mutator via BYOVD Kernel R/W☆20Sep 6, 2026Updated last month
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- This will be the repo for the BTHb.☆41Jul 27, 2026Updated 2 months ago
- Volatility 3 Plugins☆21Oct 3, 2022Updated 4 years ago
- FWT is a security analysis and file monitoring tool that utilizes Sysmon events.☆29Jul 15, 2024Updated 2 years ago
- A unified investigation cockpit built for CSIRT / SOC / DFIR teams. Ingest, correlate and visualise any forensic source in a real-time in…☆45Updated this week
- ☆22Aug 13, 2026Updated 2 months ago
- A YARA & Malware Analysis Toolkit written in Rust.☆117Sep 30, 2026Updated 3 weeks ago
- Active Directory security assessment in Rust: directory discovery, Tier-0 path analysis, supported validation, and evidence reporting.☆109Sep 25, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆13Oct 11, 2020Updated 6 years ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techn…☆66Jul 5, 2026Updated 3 months ago
- This query identifies Microsoft-signed Binaries and Scripts that are not system initiated. This technique is commonly used in phishing at…☆10Sep 14, 2022Updated 4 years ago
- Motorola LK Patcher That Allows Unlock Bootloader And Remove FRP on MTK Devices Using Fastboot and LK cert exploit☆91Jul 21, 2026Updated 3 months ago
- Shattering the 1:10 barrier. A high-velocity alternative to Plaso for the modern IR landscape☆18Jul 6, 2026Updated 3 months ago
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year