Forensics artifacts collection
☆21Jun 18, 2021Updated 5 years ago
Alternatives and similar repositories for inquisitor
Users that are interested in inquisitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small and highly portable detection tests based on MITRE's ATT&CK.☆11Feb 17, 2025Updated last year
- ☆14Feb 22, 2021Updated 5 years ago
- ☆12Apr 2, 2022Updated 4 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆16Apr 10, 2024Updated 2 years ago
- ☆29Jun 10, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆20Jul 14, 2026Updated last month
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆22Jul 18, 2023Updated 3 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- Installs ADDS and configures a vulnerable domain via a powershell script☆15Jul 13, 2023Updated 3 years ago
- A Python based Recon Tool to search for Storage Buckets☆12Jan 21, 2023Updated 3 years ago
- Meraki Dashboard API scripts in Python☆12Sep 26, 2023Updated 2 years ago
- This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…☆87Mar 3, 2022Updated 4 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A triage data collection script for macOS☆30Nov 27, 2020Updated 5 years ago
- Aralez is a triage tool for Windows and Linux that automates the collection of system information, network/process data, and files.☆25May 5, 2026Updated 3 months ago
- Reverse engineering malware samples☆16Dec 3, 2021Updated 4 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆95Sep 7, 2023Updated 2 years ago
- Software Modules and Examples for the PiFex☆15Aug 23, 2025Updated 11 months ago
- Virustotal Data to Timesketch☆15Feb 28, 2019Updated 7 years ago
- Qakbot Registry Key Configuration Decryptor☆14Dec 20, 2021Updated 4 years ago
- Threat Modelling Assets (STRIDE, DREAD, etc. cheat sheets)☆13Apr 16, 2020Updated 6 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆29Aug 25, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Binarly SDK v1☆14Dec 18, 2016Updated 9 years ago
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- Miscellaneous Scripts☆17Sep 11, 2020Updated 5 years ago
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆33Mar 16, 2026Updated 4 months ago
- Universal Radio Hacker: investigate wireless protocols like a boss 📡😎☆11Dec 5, 2019Updated 6 years ago
- ☆29Oct 15, 2025Updated 10 months ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 4 months ago
- ☆97Apr 8, 2026Updated 4 months ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆118Nov 28, 2023Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Python bindings for https://github.com/omerbenamram/evtx/☆56Jun 13, 2026Updated 2 months ago
- A Splunk app that will rotate between dashboards on a frequency; useful for displaying content on informational big screens.☆13Mar 9, 2022Updated 4 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- Fun tools around the EBS Direct API☆20Apr 16, 2021Updated 5 years ago
- A pipeline for ingesting Jumpcloud directory events into Wazuh☆19May 8, 2024Updated 2 years ago
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Mar 25, 2024Updated 2 years ago
- Easy to configure Honeypot for Blue Team☆44Jun 18, 2025Updated last year