Alternatives and similar repositories for forensics

Users that are interested in forensics are comparing it to the libraries listed below

• MISP / MISPego
  Maltego Transform to put entities into MISP events
  ☆28Updated 4 years ago
• jipegit / FECT
  Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
  ☆41Updated 5 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆41Updated 2 years ago
• AlienVault-OTX / ThreatCrowd-Maltego
  Maltego transforms for the ThreatCrowd search API
  ☆49Updated 7 years ago
• mandiant / AuditParser
  AuditParser
  ☆60Updated 12 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 8 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 8 years ago
• jaegeral / awesome-incident-response-pro-bono
  This repository is a curated list of pro bono incident response entities.
  ☆21Updated 2 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 5 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆41Updated 8 years ago
• mantarayforensics / mantaray
  MantaRay Automated Computer Forensic Triage Tool
  ☆65Updated 6 years ago
• certtools / contactdb
  The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams
  ☆37Updated 3 years ago
• kevthehermit / yaraMail
  Yara Scanner For IMAP Feeds and saved Streams
  ☆28Updated 6 years ago
• pidydx / PyIOCe
  Python OpenIOC Editor
  ☆18Updated 9 years ago
• zeroq / kraut_salad
  Proof of concept implementation of a cyber threat intelligence and incident handling platform
  ☆11Updated 2 years ago
• woanware / TargetAnalyser
  Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources
  ☆29Updated 8 years ago
• CIRCL / traceroute-circl
  Traceroute improved wrapper for CSIRT and CERT operators
  ☆39Updated last year
• michael-yip / ThreatTracker
  ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…
  ☆69Updated 10 years ago
• 9b / pdfxray_lite
  Lite version of PDF X-RAY that uses no backend
  ☆37Updated 14 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆30Updated 3 years ago
• sketchymoose / TotalRecall
  Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…
  ☆49Updated 8 years ago
• pwnwiki / dfirwiki
  Digital Forensics and Incident Response Wiki
  ☆40Updated 11 years ago
• JamesHabben / EnCaseNetworkFramework
  This is a framework written in EnScript to utilize the network capabilities of EnCase. The purpose is to allow for someone to build a qui…
  ☆13Updated 10 years ago
• markedoe / cuckoo-sandbox
  cuckoo sandbox patches and scripts
  ☆15Updated 11 years ago
• michael-yip / MaltegoVT
  A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…
  ☆84Updated 10 years ago
• secureworks / pdfxpose
  A security tool for detecting suspicious PDF modifications commonly found in BEC
  ☆41Updated 9 years ago
• bandrel / OCyara
  Performs OCR on image files and scans them for matches to YARA rules
  ☆42Updated 7 years ago
• sroberts / threat-intel-templates
  A set of templates for documenting threat intelligence
  ☆75Updated 12 years ago
• mpars0ns / maltego_censys
  Basic Maltego Transforms for looking up SSL certs and IP info from censys.io
  ☆41Updated 8 years ago
• AnttiKurittu / kirjuri
  Kirjuri is a web application for managing cases and physical forensic evidence items.
  ☆107Updated 4 years ago