Forensics artifacts collection
☆21Jun 18, 2021Updated 5 years ago
Alternatives and similar repositories for inquisitor
Users that are interested in inquisitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small and highly portable detection tests based on MITRE's ATT&CK.☆11Feb 17, 2025Updated last year
- ☆14Feb 22, 2021Updated 5 years ago
- ☆13Apr 2, 2022Updated 4 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆14Apr 10, 2024Updated 2 years ago
- ☆29Jun 10, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆24Sep 14, 2026Updated last month
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆23Jul 18, 2023Updated 3 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago
- Recon Automation☆11Jul 27, 2026Updated 2 months ago
- Sample code for my article in DotNetCurry magazine on scanning barcodes. In this sample you can generate and scan QR codes that contain a…☆18Aug 14, 2020Updated 6 years ago
- A Python based Recon Tool to search for Storage Buckets☆12Jan 21, 2023Updated 3 years ago
- Meraki Dashboard API scripts in Python☆12Sep 26, 2023Updated 3 years ago
- Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream☆12Oct 29, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A triage data collection script for macOS☆31Nov 27, 2020Updated 5 years ago
- Aralez is a triage tool for Windows, Linux and MacOS that automates the collection of system information, network/process data, and files …☆26Aug 14, 2026Updated 2 months ago
- Reverse engineering malware samples☆16Dec 3, 2021Updated 4 years ago
- Bot Framework v4 and OCR Extract☆11Mar 27, 2019Updated 7 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆96Sep 7, 2023Updated 3 years ago
- Public resources NB shares☆18Mar 7, 2016Updated 10 years ago
- Virustotal Data to Timesketch☆15Feb 28, 2019Updated 7 years ago
- ☆29Oct 15, 2025Updated last year
- Threat Modelling Assets (STRIDE, DREAD, etc. cheat sheets)☆13Apr 16, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Actionable data for Security Operations☆19Aug 26, 2021Updated 5 years ago
- Binarly SDK v1☆14Dec 18, 2016Updated 9 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆29Aug 25, 2022Updated 4 years ago
- Splunk integration with MISP☆10Apr 14, 2018Updated 8 years ago
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆34Mar 16, 2026Updated 6 months ago
- Miscellaneous Scripts☆17Sep 11, 2020Updated 6 years ago
- ☆15Jul 4, 2024Updated 2 years ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 6 months ago
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆18May 6, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆33Mar 19, 2022Updated 4 years ago
- ☆97Apr 8, 2026Updated 6 months ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆49Oct 24, 2025Updated 11 months ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆119Nov 28, 2023Updated 2 years ago
- Exporting MISP event attributes to yara rules usable with Thor apt scanner☆25Mar 27, 2017Updated 9 years ago
- A Splunk app that will rotate between dashboards on a frequency; useful for displaying content on informational big screens.☆13Mar 9, 2022Updated 4 years ago
- A pipeline for ingesting Jumpcloud directory events into Wazuh☆19May 8, 2024Updated 2 years ago