kk0m4k / docker-forensicsLinks
☆24Updated 6 years ago
Alternatives and similar repositories for docker-forensics
Users that are interested in docker-forensics are comparing it to the libraries listed below
Sorting:
- Cuckoo running in a nested hypervisor☆128Updated 5 years ago
- Cuckoo Sandbox plugin for extracts configuration data of known malware☆135Updated last year
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆40Updated 6 years ago
- Malware Analysis, Threat Intelligence and Reverse Engineering: LABS☆82Updated 4 years ago
- Mindmaps for threat hunting - work in progress.☆152Updated 3 years ago
- A collection of infosec related scripts and information.☆53Updated last year
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 7 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆100Updated 5 years ago
- Mitre Att&ck Technique Emulation☆82Updated 6 years ago
- ☆52Updated 7 years ago
- Yara rules to be used with the Burp Yara-Scanner extension☆49Updated 3 years ago
- No-Script Automation Tool☆56Updated 7 years ago
- Community-based integrated malware identification system☆82Updated 2 years ago
- Prepare, Hunt, and Respond - Conceptual model against cyber attacks by JYVSECTEC☆61Updated 3 years ago
- Detecting Lateral Movement with Machine Learning☆139Updated 8 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆42Updated 4 years ago
- Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)☆103Updated 4 months ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆51Updated 6 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated 2 years ago
- Tools for DFIR☆120Updated 7 years ago
- A lightweight tool to load Windows Event Log evtx files into Elasticsearch.☆119Updated 5 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 8 years ago
- MoP - "Master of Puppets" - Advanced malware tracking framework☆83Updated last year
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆57Updated 3 years ago
- Placeholder for IRIS-H Digital Forensics Tool☆15Updated 7 years ago
- Extract indicators of compromise from text, including "escaped" ones.☆163Updated 5 years ago
- Personal compilation of APT malware from whitepaper releases, documents and own research☆265Updated 6 years ago
- A tool to assess data quality, built on top of the awesome OSSEM.☆79Updated 3 years ago
- Scripts to analyze stuff☆147Updated 3 months ago