nesfit / NetfoxDetective
Network Forensic Extendable Analysis Tool
☆39Updated 2 years ago
Alternatives and similar repositories for NetfoxDetective:
Users that are interested in NetfoxDetective are comparing it to the libraries listed below
- Fast incident overview☆39Updated 8 years ago
- Simple Powershell scripts to collect all Windows Event Logs from a host and parse them into one CSV timeline.☆33Updated 6 years ago
- Git for me to put all my forensics stuff☆21Updated last month
- Force-Directed Graph Generator for Volatility Ouputs☆26Updated 5 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 5 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year
- Tools for parsing Forensic images☆41Updated 6 years ago
- ☆31Updated 3 months ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 2 years ago
- Use DNS to hunt for threats including DGAs☆14Updated 9 years ago
- Windows 10 Live Information viewer☆36Updated 3 years ago
- OSSEC Decoder & Rulesets for Sysmon Events☆15Updated 9 years ago
- OSSEM Modular☆27Updated 4 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated 2 years ago
- Automated forensics written in PowerShell☆34Updated 5 years ago
- Build your own threat hunting maturity model☆11Updated 7 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated 2 years ago
- Registry Explorer bookmark definitions☆41Updated 2 months ago
- CyberChef update scripts in PowerShell & Bash☆16Updated 10 months ago
- Dashboards for conducting forensic investigation using windows events in Kibana☆17Updated 5 years ago
- ☆38Updated 5 years ago
- Script to parse Process Monitor XML log file, and give you a summary report.☆23Updated 8 years ago
- Sysmon configuration file template with default high-quality event tracing☆11Updated 7 years ago
- Event Log Analysis Tools☆29Updated 8 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 2 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 3 years ago
- Extract compressed memory pages from page-aligned data☆42Updated 6 years ago
- incident response scripts☆19Updated 5 years ago
- ☆12Updated 3 years ago