☆23Oct 9, 2024Updated last year
Alternatives and similar repositories for triage-collector
Users that are interested in triage-collector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 7 months ago
- ☆25Mar 22, 2023Updated 3 years ago
- Primarily aimed at replicating files that cannot be directly copied due to being in use.☆10Apr 22, 2024Updated 2 years ago
- AI analyzer for Hayabusa results.☆27Aug 22, 2026Updated 2 weeks ago
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 22, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows Event Log Knowledge Base☆34Jul 6, 2026Updated 2 months ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆95Sep 7, 2023Updated 3 years ago
- ☆10Feb 11, 2022Updated 4 years ago
- RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.☆332Sep 3, 2023Updated 3 years ago
- コンテナ内から安全にダークウェブをクローリングするための環境☆14Jan 17, 2023Updated 3 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆24Oct 31, 2018Updated 7 years ago
- Queries for parsed spotlight database in sqlite☆13Dec 29, 2020Updated 5 years ago
- A JXA script for enumerating running processes, printed out in a json, parent-child tree.☆14Jan 28, 2022Updated 4 years ago
- RustyBlue is a rust implementation of DeepblueCLI, a forensics log analyzer for finding evidence of compromise from windows event logs.☆73Oct 13, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- Tools for macOS Forensic Bootable media☆16May 20, 2020Updated 6 years ago
- ☆64Oct 12, 2024Updated last year
- ☆14Updated this week
- Basically a KrabsETW rip-off written in Rust☆96Oct 20, 2025Updated 10 months ago
- Slides and material from my conference presentations☆16Mar 30, 2024Updated 2 years ago
- CyberChef update scripts in PowerShell & Bash☆18Apr 22, 2024Updated 2 years ago
- PowerShell Script Analyzer☆68Oct 26, 2023Updated 2 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A command-line tool for efficiently extracting files, directories, and alternate data streams directly from NTFS image files.☆21Jun 1, 2026Updated 3 months ago
- A utility to force query DNS over DoH off of CloudFlare API when DNS block is in place☆10Aug 26, 2018Updated 8 years ago
- A Rust library for parsing and evaluating Sigma rules☆24Nov 26, 2025Updated 9 months ago
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- 分析ツール結果シート☆24Jun 10, 2026Updated 2 months ago
- Desktop application to generate dummy files☆14May 3, 2024Updated 2 years ago
- Sample evtx files to use for testing hayabusa detection rules☆71Nov 5, 2025Updated 10 months ago
- Generic Signature Format for SIEM Systems☆18Jul 25, 2023Updated 3 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Remotely collect linux live forensics artifacts.☆14Jul 8, 2022Updated 4 years ago
- Honeybag helps you to create 'bait archive' with any folders and files, notify you if someone accesses it☆17Sep 30, 2020Updated 5 years ago
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- ☆15Sep 26, 2022Updated 3 years ago
- Carves and recreates VSS catalog and store from Windows disk image.☆101Jan 24, 2023Updated 3 years ago