DFIR system for FindEvil Hackathon Submission
☆37Aug 24, 2026Updated last month
Alternatives and similar repositories for findevil
Users that are interested in findevil are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A 'code-mode' MCP server that allows LLMs to safely generate and execute JavaScript code that performs forensic analysis and employs trad…☆38Aug 27, 2026Updated last month
- Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response☆67Oct 3, 2026Updated 2 weeks ago
- Agentic DFIR☆93Updated this week
- Pcap recording of Heralding sessions☆10Jan 19, 2018Updated 8 years ago
- Signal database acquisition and decryption.☆38Nov 19, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Mishky's AD Range & The Escalation Path from Hell, Version 1.1☆13May 7, 2025Updated last year
- ☆23Jan 28, 2026Updated 8 months ago
- An installation script to help with the setup of a Kali VM for The Hacker Playbook: Practical Guide To Penetration Testing by Peter Kim☆17Jul 21, 2015Updated 11 years ago
- A declarative, self-hosted containerised tool for visualising and managing home lab & network architecture diagrams.☆19Jul 24, 2026Updated 2 months ago
- Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing☆56May 18, 2019Updated 7 years ago
- Some resources to facilitate my blog on auditd for security monitoring☆13Mar 23, 2023Updated 3 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆17Feb 5, 2016Updated 10 years ago
- Virustotal Data to Timesketch☆15Feb 28, 2019Updated 7 years ago
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Public Landing Page☆16Jan 7, 2023Updated 3 years ago
- Registry timestamp manipulation☆17Feb 26, 2014Updated 12 years ago
- Basic network sec tool for real-time threat detection and C2 communication prevention. Features 70+ detection modules, IOC integration, c…☆17Jun 11, 2024Updated 2 years ago
- Presentations from yours truely☆28Sep 11, 2026Updated last month
- Dork Search Files☆14Feb 15, 2025Updated last year
- Gets events from the Office 365 unified audit log and outputs their details into the pipeline☆16Dec 16, 2020Updated 5 years ago
- Tools and Binaries to use with KAPE☆13Aug 13, 2019Updated 7 years ago
- Triaging Windows event logs based on SANS Poster☆52Nov 22, 2025Updated 11 months ago
- Library and tools to access the Windows SuperFetch database format☆13Oct 9, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Attack techniques for threat emulation in VMware environments☆55Aug 25, 2026Updated last month
- I'm learning thm☆15Dec 18, 2021Updated 4 years ago
- Credential Scanner for Popular Desktop AI Platforms☆17Jun 25, 2026Updated 3 months ago
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆27Oct 5, 2026Updated 2 weeks ago
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆52Sep 13, 2026Updated last month
- Windows Ransomware Detection and Protection, Published by Packt☆11Mar 18, 2023Updated 3 years ago
- Common Sense Security Framework☆15Apr 26, 2018Updated 8 years ago
- Terminal Forensics CheatSheets☆15Jul 28, 2015Updated 11 years ago
- Tools for ossec equivalent intrusion detection and audit for osquery.☆11Jun 2, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule☆20Oct 19, 2020Updated 6 years ago
- Various Modules & Scripts for use with Viper Framework☆27Aug 20, 2019Updated 7 years ago
- ☆10Aug 14, 2021Updated 5 years ago
- Netcat binaries compiled for ARM that work on Android devices☆12Jun 12, 2015Updated 11 years ago
- ☆73May 22, 2023Updated 3 years ago
- ☆20Jan 12, 2022Updated 4 years ago
- Your AI Assistant for Weekend Forensics☆35Updated this week