Alternatives and similar repositories for ir-triage-toolkit

Users that are interested in ir-triage-toolkit are comparing it to the libraries listed below

• chaoticmachinery / mass_triage_tools
  Mass Triage Tools
  ☆20Updated 3 months ago
• gburkle / Stalker
  Threat Intel and Incident Reponse
  ☆10Updated 6 years ago
• bonifield / volatilityGrapher
  Force-Directed Graph Generator for Volatility Ouputs
  ☆26Updated 6 years ago
• itsreallynick / office-crackros
  Crack your macros like the math pros.
  ☆33Updated 8 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• Invoke-IR / PowerForensicsPortable
  ☆32Updated 5 months ago
• jipegit / FECT
  Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer
  ☆42Updated 4 years ago
• truekonrads / kpulp
  Konrads' Pen-Ultimate (Windows) Log File Parser
  ☆13Updated 2 years ago
• matthewdunwoody / PS_logging_reg
  A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed
  ☆16Updated 8 years ago
• grayfold3d / POSH-Triage
  Tools for parsing Forensic images
  ☆41Updated 6 years ago
• forensicmatt / RustyReg
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Updated 3 years ago
• bfuzzy / ThreatHunter-Playbook
  A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
  ☆14Updated 6 years ago
• PivotAll / PivotAll
  Comprehensive Pivoting Framework
  ☆20Updated 8 years ago
• nogoodconfig / pyarascanner
  A simple many-rules to many-files YARA scanner for incident response or malware zoos.
  ☆26Updated 6 years ago
• JimmyAstle / Atomic-Parser
  Python parser for Red Canary's Atomic Red Team Yamls
  ☆27Updated 6 years ago
• sk4la / plast
  Modular command-line threat hunting tool & framework.
  ☆17Updated 4 years ago
• Raikia / Get-ReconInfo
  A powershell script that prints a lot of IP and connection info to the screen
  ☆31Updated 8 years ago
• Beercow / ProcDOT-Plugins
  Plugins to add funtionality to ProcDOT. http://www.procdot.com
  ☆23Updated last year
• sans-blue-team / course_indices
  Indices for courses in SANS' Network Security Operations curriculum
  ☆15Updated 9 years ago
• redcanaryco / cb-response-smb1-utility
  A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.
  ☆15Updated 5 years ago
• AlmCo / Panorama
  Fast incident overview
  ☆39Updated 8 years ago
• davidpany / rr_parseomater
  RegRipper wrapper for simplified bulk parsing or registry hives
  ☆9Updated 6 years ago
• idiom / IRScripts
  Incident Response Scripts
  ☆30Updated 5 years ago
• devgc / GcLinkParser
  A GC link parser for both linkfiles and jumplists.
  ☆18Updated 8 years ago
• mubix / ccdc_malware
  Talk given at DerbyCon and RuxCon 2016
  ☆22Updated 8 years ago
• sans-blue-team / sec455-wiki
  ☆30Updated 6 years ago
• DissectMalware / base64_substring
  Generate a Yara rule to find base64-encoded files containg a specific keyword
  ☆40Updated 6 years ago
• CIRCL / forensic-tools
  CIRCL system forensic tools or a jumble of tools to support forensic
  ☆42Updated 2 years ago
• daguy666 / Transit
  MacOS incident Response Toolkit. Mostly written while stuck on a NJTransit train.
  ☆20Updated 5 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 8 years ago