kk0m4k / docker-forensics
☆23Updated 5 years ago
Alternatives and similar repositories for docker-forensics:
Users that are interested in docker-forensics are comparing it to the libraries listed below
- OSSEM Modular☆27Updated 4 years ago
- Projects for AWS ThreatHunting☆21Updated 3 years ago
- A YARA Rule Performance Measurement Tool☆58Updated 10 months ago
- Powershell / C# based cross platform forensic framework based for live incident response☆22Updated 4 years ago
- No-Script Automation Tool☆56Updated 6 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41Updated 3 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Updated 5 years ago
- Use DNS to hunt for threats including DGAs☆14Updated 9 years ago
- Carbon Black Response IR tool☆53Updated 4 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated last year
- SilkETW & SilkService☆40Updated 5 years ago
- Sandbox feature upgrade with the help of wrapped samples☆75Updated 6 years ago
- Links to malware-related YARA rules☆14Updated 2 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Mitre Att&ck Technique Emulation☆82Updated 5 years ago
- Presentation Slides and Video links☆31Updated 3 years ago
- ☆33Updated 3 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆59Updated 2 years ago
- Extract common Windows artifacts from source images and VSCs☆66Updated 3 years ago
- A DFVFS Backed Forensic Viewer☆41Updated 4 years ago
- Merge all Yara rules from official Yara github repository in one .yar file☆28Updated 6 years ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 5 years ago
- Website crawler with YARA detection☆88Updated last year
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆42Updated 6 years ago
- XOR Key Extractor☆49Updated 5 months ago