ktneely / forensicsLinks
shell script to create an image and perform initial examination on a drive
☆15Updated 5 years ago
Alternatives and similar repositories for forensics
Users that are interested in forensics are comparing it to the libraries listed below
Sorting:
- MantaRay Automated Computer Forensic Triage Tool☆65Updated 6 years ago
- Maltego Transform to put entities into MISP events☆28Updated 4 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆41Updated 5 years ago
- Fast incident overview☆41Updated 8 years ago
- FireEye Alert json files to MISP Malware information sharing plattform (Alpha)☆32Updated 8 years ago
- Lite version of PDF X-RAY that uses no backend☆38Updated 14 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Updated 6 years ago
- ☆33Updated last year
- Maltego integration of https://haveibeenpwned.com☆62Updated 9 months ago
- Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources☆29Updated 8 years ago
- Home to the ActorTrackr source code☆24Updated 8 years ago
- PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts☆56Updated 5 years ago
- Maltego transforms for the ThreatCrowd search API☆49Updated 7 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆78Updated 5 years ago
- Some dfir stuff☆30Updated 3 years ago
- Yara Scanner For IMAP Feeds and saved Streams☆28Updated 6 years ago
- Digital Forensics and Incident Response Wiki☆40Updated 11 years ago
- AuditParser☆60Updated 12 years ago
- MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.☆20Updated 5 years ago
- pcapdj - dispatch pcap files☆46Updated 5 years ago
- Python bindings for Yeti's API☆19Updated 2 years ago
- A security tool for detecting suspicious PDF modifications commonly found in BEC☆42Updated 9 years ago
- ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…☆69Updated 10 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆41Updated 2 years ago
- Queries to parse sysmon event log file with microsoft logparser☆58Updated 10 years ago
- Force-Directed Graph Generator for Volatility Ouputs☆26Updated 6 years ago
- The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams☆37Updated 3 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆25Updated 2 years ago
- An informational repo about hunting for adversaries in your IT environment.☆14Updated 8 years ago
- This repository is a curated list of pro bono incident response entities.☆21Updated 2 years ago