mnrkbys / fjtaLinks
FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), generates timelines, and detects suspicious activities.
☆88Updated 3 weeks ago
Alternatives and similar repositories for fjta
Users that are interested in fjta are comparing it to the libraries listed below
Sorting:
- A repository to share publicly available Velociraptor detection content☆186Updated this week
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆88Updated 7 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆151Updated this week
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆54Updated 2 years ago
- Parses USB connection artifacts from offline Registry hives☆101Updated 3 months ago
- This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.☆114Updated last year
- ☆68Updated last week
- USN Journal full path builder☆61Updated last year
- The core backend server handling API requests and task management☆48Updated last week
- Harness the power of Splunk for your investigations☆130Updated 2 weeks ago
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆109Updated 11 months ago
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆108Updated 11 months ago
- Sample evtx files to use for testing hayabusa detection rules☆60Updated 11 months ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆150Updated last year
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆157Updated 5 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆61Updated this week
- Convert Sigma rules to SIEM queries, directly in your browser.☆95Updated last week
- Detection Engineering with YARA☆87Updated last year
- A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…☆177Updated 4 months ago
- Forensic Artifact Collection Tool Matrix☆90Updated 10 months ago
- A repo hosting the Markua content for the EZ Tools manuals hosted on Leanpub☆81Updated last month
- Search Index Database Reporter☆118Updated 10 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆80Updated 4 months ago
- An opensource sigma conversion tool built using pysigma☆139Updated last month
- Incident Response documents and tooling☆105Updated 3 weeks ago
- LotL RMM☆247Updated last week
- ☆96Updated last month
- Repository for sharing examples of our artifacts data and for use in new analyst recruitment.☆107Updated 5 months ago
- A specification and style guide for YARA rules☆56Updated last year
- A list of RMMs designed to be used in automation to build alerts☆113Updated 5 months ago