kk0m4k / docker-forensics
☆23Updated 5 years ago
Alternatives and similar repositories for docker-forensics:
Users that are interested in docker-forensics are comparing it to the libraries listed below
- Projects for AWS ThreatHunting☆21Updated 3 years ago
- No-Script Automation Tool☆56Updated 6 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- OSSEM Modular☆27Updated 4 years ago
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 6 years ago
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 3 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Updated 4 years ago
- Repository with Sample threat hunting notebooks on Security Event Log Data Sources☆61Updated 2 years ago
- ☆50Updated 6 years ago
- Site for IWS book content☆18Updated 6 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- The new name is DeTT&CT☆24Updated 5 years ago
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Updated 6 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated 2 years ago
- Repository for my ATT&CK analysis research.☆68Updated 5 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 5 years ago
- Simple Docker Honeypot server emulating small snippets of the Docker HTTP API☆30Updated 4 years ago
- macOS Artifact Intelligence Tool☆13Updated 5 years ago
- Providing timelines based on OSINT Reports☆32Updated last year
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- Presentation Slides and Video links☆32Updated 3 years ago
- A YARA Rule Performance Measurement Tool☆58Updated 11 months ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Updated 5 years ago
- ☆44Updated 7 years ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 5 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- Carbon Black Response IR tool☆53Updated 4 years ago