The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
☆13Sep 9, 2020Updated 5 years ago
Alternatives and similar repositories for DFUR-Splunk-App
Users that are interested in DFUR-Splunk-App are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆24Aug 30, 2019Updated 6 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Public exploits☆16May 28, 2018Updated 8 years ago
- DFIR Presentations☆15Apr 24, 2026Updated 2 months ago
- Vulnerability Assessment Module - OpenVas with Elastic stack using VulnWhisperer☆20Jun 11, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python bindings for https://github.com/omerbenamram/mft☆25Dec 23, 2025Updated 6 months ago
- Linux-KVM with rVMI extensions☆23Aug 28, 2017Updated 8 years ago
- ☆17Jul 2, 2026Updated 2 weeks ago
- ☆51Aug 11, 2023Updated 2 years ago
- Testing your Serverless projects with Jest the easy way!☆27Jan 3, 2023Updated 3 years ago
- Coming to a place near you.....☆25Jun 29, 2015Updated 11 years ago
- pure Python binary analysis framework☆23Oct 26, 2018Updated 7 years ago
- Recover EXT filesystem info from carved directory blocks☆19Jun 23, 2017Updated 9 years ago
- Provides access to libhashcat☆30Apr 6, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- MiniDump a process in memory with rust☆37Jun 20, 2021Updated 5 years ago
- FireEye Alert json files to MISP Malware information sharing plattform (Alpha)☆32Jun 11, 2017Updated 9 years ago
- Resolves DLL API entrypoints for a process w/ remote query capabilities.☆58Jun 23, 2017Updated 9 years ago
- AWS EKS Cluster Forensics☆23Aug 16, 2021Updated 4 years ago
- Jupyter Notebooks for Digital Forensics & Incident Response☆10Nov 23, 2021Updated 4 years ago
- Bash Recon Scan - Recon and Scan a network using Bash☆31Jun 19, 2022Updated 4 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated last month
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- A table containing CTF challenge links and their corresponding walkthroughs from different platforms.☆13Oct 23, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- Library for Object Linking and Embedding (OLE) data types☆12Jun 24, 2026Updated 3 weeks ago
- A few scripts I put together to send and receive data from an Azure Log Analytics workspace leveraging the Azure Monitor HTTP Data Collec…☆22May 22, 2023Updated 3 years ago
- Server for receiving autorun data from the clients☆13Sep 26, 2017Updated 8 years ago
- general purpose and malware specific analysis tools☆101Oct 22, 2015Updated 10 years ago
- PyCommand Scripts for Immunity Debugger☆37Jun 21, 2014Updated 12 years ago
- Digital Forensics and Incident Response notes and Autopsy tool walkthrough☆11Feb 3, 2022Updated 4 years ago
- Matt's DFIR blog☆14Jun 23, 2026Updated 3 weeks ago
- Construct triage artifact based on rules☆15Jun 18, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Python-based cloud node for local use☆11Mar 7, 2018Updated 8 years ago
- libemu shim layer and win32 environment for Unicorn Engine☆74Apr 14, 2017Updated 9 years ago
- ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.☆36Jun 1, 2023Updated 3 years ago
- Documentation for DFIR ORC, artefact collection tool dedicated to Microsoft Windows☆12May 4, 2026Updated 2 months ago
- QEMU with rVMI extensions☆26Jul 25, 2017Updated 8 years ago
- Library and tools to access the Windows Hibernation File (hiberfil.sys) format☆16Jun 27, 2026Updated 3 weeks ago
- C# SDK for SecureAuth IdP API☆11May 31, 2023Updated 3 years ago