Alternatives and similar repositories for forensics

Users that are interested in forensics are comparing it to the libraries listed below

• MISP / MISPego
  Maltego Transform to put entities into MISP events
  ☆28Updated 4 years ago
• mantarayforensics / mantaray
  MantaRay Automated Computer Forensic Triage Tool
  ☆65Updated 6 years ago
• jipegit / FECT
  Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
  ☆41Updated 5 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 5 years ago
• pwnwiki / dfirwiki
  Digital Forensics and Incident Response Wiki
  ☆40Updated 11 years ago
• jaegeral / FireMISP
  FireEye Alert json files to MISP Malware information sharing plattform (Alpha)
  ☆32Updated 8 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆41Updated 8 years ago
• mandiant / AuditParser
  AuditParser
  ☆60Updated 12 years ago
• jaegeral / awesome-incident-response-pro-bono
  This repository is a curated list of pro bono incident response entities.
  ☆21Updated 2 years ago
• dougiep16 / actortrackr
  Home to the ActorTrackr source code
  ☆24Updated 8 years ago
• hiddenillusion / IR
  Some dfir stuff
  ☆30Updated 3 years ago
• Invoke-IR / PowerForensicsPortable
  ☆33Updated last year
• zeroq / kraut_salad
  Proof of concept implementation of a cyber threat intelligence and incident handling platform
  ☆11Updated 2 years ago
• YahooArchive / PyIOCe
  Python IOC Editor
  ☆64Updated 10 years ago
• woanware / TargetAnalyser
  Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources
  ☆29Updated 8 years ago
• cmlh / Maltego-haveibeenpwned
  Maltego integration of https://haveibeenpwned.com
  ☆62Updated 9 months ago
• certtools / contactdb
  The ContactDB project was initiated to cover the need for a tool to maintain contacts for CSIRT teams
  ☆37Updated 3 years ago
• AlienVault-OTX / ThreatCrowd-Maltego
  Maltego transforms for the ThreatCrowd search API
  ☆49Updated 7 years ago
• secureworks / pdfxpose
  A security tool for detecting suspicious PDF modifications commonly found in BEC
  ☆41Updated 9 years ago
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆88Updated 6 years ago
• michael-yip / ThreatTracker
  ThreatTracker is a Python script designed to monitor and generate alerts on given sets of indicators of compromise (IOCs) indexed by a se…
  ☆69Updated 10 years ago
• MatthewClarkMay / fTriage
  Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.
  ☆21Updated 6 years ago
• michael-yip / MaltegoVT
  A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…
  ☆84Updated 10 years ago
• Xen0ph0n / MIDAS
  Metadata Inspection Database Alerting System
  ☆42Updated 12 years ago
• kevthehermit / yaraMail
  Yara Scanner For IMAP Feeds and saved Streams
  ☆28Updated 6 years ago
• botherder / vxcage
  REST API based malware repository (abandoned)
  ☆107Updated 10 years ago
• 9b / pdfxray_lite
  Lite version of PDF X-RAY that uses no backend
  ☆37Updated 14 years ago
• paulpc / nyx
  Threat Intelligence distribution
  ☆31Updated 9 years ago
• berggren / fordropweb
  Forensic Dropbox
  ☆22Updated 13 years ago
• mitre / caret
  CARET - A tool for viewing cyber analytic relationships
  ☆55Updated 5 years ago