Alternatives and similar repositories for forensics

Users that are interested in forensics are comparing it to the libraries listed below

• MISP / MISPego
  Maltego Transform to put entities into MISP events
  ☆28Updated 4 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆41Updated 8 years ago
• Invoke-IR / PowerForensicsPortable
  ☆33Updated last year
• jipegit / FECT
  Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
  ☆41Updated 5 years ago
• mantarayforensics / mantaray
  MantaRay Automated Computer Forensic Triage Tool
  ☆65Updated 6 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 5 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 8 years ago
• MatthewClarkMay / fTriage
  Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.
  ☆21Updated 6 years ago
• AlienVault-OTX / ThreatCrowd-Maltego
  Maltego transforms for the ThreatCrowd search API
  ☆47Updated 7 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆30Updated 4 years ago
• pwnwiki / dfirwiki
  Digital Forensics and Incident Response Wiki
  ☆40Updated 11 years ago
• woanware / TargetAnalyser
  Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources
  ☆29Updated 9 years ago
• jaegeral / awesome-incident-response-pro-bono
  This repository is a curated list of pro bono incident response entities.
  ☆21Updated 2 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 8 years ago
• certtools / contactdb
  The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams
  ☆37Updated 4 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Updated 3 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆75Updated 12 years ago
• markedoe / cuckoo-sandbox
  cuckoo sandbox patches and scripts
  ☆15Updated 12 years ago
• TakahiroHaruyama / onigiri
  onigiri - remote malware triage script
  ☆24Updated 10 years ago
• michael-yip / ThreatTracker
  ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…
  ☆69Updated 10 years ago
• activeshadow / maltego-nmap
  A few transforms and a machine for parsing Nmap XML results
  ☆38Updated 9 years ago
• michael-yip / MaltegoVT
  A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…
  ☆82Updated 10 years ago
• bonifield / volatilityGrapher
  Force-Directed Graph Generator for Volatility Ouputs
  ☆26Updated 6 years ago
• anthonykasza / opendns_transform
  Maltego transform for OpenDNS Investigate API
  ☆12Updated 11 years ago
• sketchymoose / TotalRecall
  Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…
  ☆49Updated 8 years ago
• daguy666 / Transit
  MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
  ☆20Updated 5 years ago
• secureworks / pdfxpose
  A security tool for detecting suspicious PDF modifications commonly found in BEC
  ☆41Updated 9 years ago
• thirdeyeintelligence / ThreatHunting
  An informational repo about hunting for adversaries in your IT environment.
  ☆14Updated 8 years ago
• yeti-platform / pyeti
  Python bindings for Yeti's API
  ☆19Updated 2 years ago
• w8mej / IRKnowledge
  A curated list of tools for incident response
  ☆34Updated last year