Autonomous DFIR agent — SANS SIFT Workstation MCP server for incident response
☆66Oct 3, 2026Updated 2 weeks ago
Alternatives and similar repositories for trudi
Users that are interested in trudi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Agentic DFIR☆92Updated this week
- ☆36Updated this week
- Repo to hold mcp server for velociraptor☆41Oct 11, 2026Updated last week
- Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android ba…☆101Updated this week
- Wazuh MCP Server: AI-Driven SOC Automation☆92Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- Attack techniques for threat emulation in VMware environments☆55Aug 25, 2026Updated last month
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- A tool for fetching DFIR and other GitHub tools.☆30Sep 17, 2026Updated last month
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Jevline: start from one confirmed-malicious process; Jev links the rest of the incident into a timeline, execution chain and evidence tab…☆41Updated this week
- Contains compiled binaries of Volatility☆37May 18, 2025Updated last year
- A command-line tool for efficiently extracting files, directories, and alternate data streams directly from NTFS image files.☆23Oct 11, 2026Updated last week
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆24Sep 14, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆120Updated this week
- Forensic extractor for Claude Code and Claude Cowork local state — macOS/Windows captures☆27Jun 16, 2026Updated 4 months ago
- Monitors and curates cybersecurity-related repositories weekly (Thursday).☆17Updated this week
- ☆23Jan 28, 2026Updated 8 months ago
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆24Jul 18, 2023Updated 3 years ago
- Regexplore is a Volatility plugin designed to mimic the functionality of the Registry Explorer plugins in EZsuite☆18Mar 31, 2023Updated 3 years ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆17Jan 17, 2026Updated 9 months ago
- Disk Image Mounting Script☆14Jul 21, 2026Updated 2 months ago
- Chrome Logs Events and Protobuf Parser☆39Dec 13, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MS Word (DOCx) Parsing Tool☆25Updated this week
- ☆22Aug 29, 2024Updated 2 years ago
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆36Jun 5, 2026Updated 4 months ago
- Open-source PowerShell toolkit for Microsoft 365 security investigations - Read-only compromise assessment☆86Mar 9, 2026Updated 7 months ago
- A hex viewer for the sleuths!☆19Nov 7, 2025Updated 11 months ago
- Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.☆60Jan 26, 2025Updated last year
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
- Script to process PDF files☆23May 23, 2025Updated last year
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆52Sep 13, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A series of python scripts to extract information from SQLite Data Files☆23Nov 15, 2025Updated 11 months ago
- NTFS file system specimens☆13May 21, 2026Updated 4 months ago
- A command-line tool for searching files, directories, and alternate data streams directly from NTFS image files.☆30Oct 11, 2026Updated last week
- This repo contains the source code for Scalpel 1.60, the most widely used public release of the Scalpel file carver.☆11Oct 9, 2026Updated last week
- A YARA & Malware Analysis Toolkit written in Rust.☆117Sep 30, 2026Updated 2 weeks ago
- ☆22Oct 2, 2026Updated 2 weeks ago
- ☆77May 11, 2026Updated 5 months ago