teamdfir / siftLinks
SIFT
☆508Updated last year
Alternatives and similar repositories for sift
Users that are interested in sift are comparing it to the libraries listed below
Sorting:
- CLI tool to manage a SIFT Install☆420Updated 2 years ago
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆499Updated 2 years ago
- Digital Forensics artifact repository☆1,118Updated 5 months ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆337Updated 2 years ago
- FireEye Publicly Shared Indicators of Compromise (IOCs)☆465Updated 6 years ago
- CyLR - Live Response Collection Tool☆680Updated 3 years ago
- User guide of MISP☆268Updated 5 months ago
- ☆190Updated last year
- A framework for orchestrating forensic collection, processing and data export☆319Updated this week
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆449Updated 3 years ago
- Yara Rule Analyzer and Statistics☆375Updated 2 years ago
- Autopsy Python Plugins☆353Updated this week
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆321Updated 3 months ago
- Salt States for Configuring the SIFT Workstation☆103Updated 3 weeks ago
- ☆276Updated 2 years ago
- Web App for Volatility framework☆381Updated 6 months ago
- A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.☆680Updated this week
- Scripts and code referenced in CrowdStrike blog posts☆331Updated 5 years ago
- Evolving directions on building the best Open Source Forensics VM☆160Updated 6 years ago
- FAME Automates Malware Evaluation☆898Updated last month
- A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.☆246Updated 3 years ago
- Documentation of TheHive☆397Updated last year
- Simple Bash IOC Scanner☆736Updated 3 years ago
- MISP trainings, threat intel and information sharing training materials with source code☆408Updated last week
- Incident Response Hierarchy of Needs☆462Updated 2 years ago
- A Powershell incident response framework☆1,605Updated 2 years ago
- Modular file scanning/analysis framework☆618Updated 5 years ago
- Clusters and elements to attach to MISP events or attributes (like threat actors)☆563Updated this week
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆918Updated last year
- Collection of forensics artifacts location for Mac OS X and iOS☆331Updated 3 years ago