Salt States for Configuring the SIFT Workstation
☆110Sep 19, 2026Updated this week
Alternatives and similar repositories for sift-saltstack
Users that are interested in sift-saltstack are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Volatility plugins developed and maintained by the community☆22Sep 18, 2024Updated 2 years ago
- SIFT Bootstrap Script☆144Jun 20, 2017Updated 9 years ago
- CLI tool to manage a SIFT Install☆412Mar 25, 2023Updated 3 years ago
- SIFT☆551Feb 14, 2024Updated 2 years ago
- Packer.io Scripts to build the SIFT VM(s)☆11Aug 29, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This repository maintains the SaltStack state files for the REMnux distro.☆60Sep 10, 2026Updated last week
- Cast is an installer for any compatible Saltstack based distribution like SIFT or REMnux☆140Updated this week
- Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.☆70Aug 7, 2020Updated 6 years ago
- Windows Thingies in Python for live use.☆24Apr 22, 2019Updated 7 years ago
- Configuration files for the SOF-ELK VM☆1,754Updated this week
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Docker container of SANS Investigative Forensic Toolkit (SIFT) Workstation Version 3☆10Oct 9, 2016Updated 9 years ago
- Site for IWS book content☆17Oct 28, 2018Updated 7 years ago
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆44Apr 23, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The method and files used to generate Sysmon event logs, push them to a remote Splunk, and ingest/normalize the data for analysis.☆10Sep 28, 2020Updated 5 years ago
- Development guide for Volatility Plugins☆22Sep 6, 2017Updated 9 years ago
- parser for Google search strings☆40Sep 14, 2019Updated 7 years ago
- ☆16Oct 24, 2024Updated last year
- ReviveIT (revit) is a proof of concept file recovery tool (carver)☆13Dec 3, 2020Updated 5 years ago
- PowerShell Script to facilitate the processing of SRUM data for on-the-fly forensics and if needed threat hunting☆23Oct 26, 2019Updated 6 years ago
- A Powershell incident response framework☆1,660Nov 22, 2022Updated 3 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆19Feb 26, 2024Updated 2 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Golang Parser for Microsoft Event Logs☆109Updated this week
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆346Jun 25, 2022Updated 4 years ago
- Proof of concept implementation of a cyber threat intelligence and incident handling platform☆11Feb 10, 2023Updated 3 years ago
- Indices for courses in SANS' Network Security Operations curriculum☆17Feb 5, 2016Updated 10 years ago
- Threat hunting repo for my independent study on threat hunting with OSQuery☆27Jan 16, 2018Updated 8 years ago
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 7 years ago
- Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just a…☆37Apr 24, 2018Updated 8 years ago
- Automated Memory Forensic☆34Jul 18, 2018Updated 8 years ago
- mindmap created for tools can be used during analysis/investigation☆28Jan 4, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Presentation Slides and Video links☆32Nov 8, 2021Updated 4 years ago
- CyLR - Live Response Collection Tool☆735Jun 1, 2022Updated 4 years ago
- Windows registry samples☆24Nov 18, 2018Updated 7 years ago
- Automagically extract forensic timeline from volatile memory dump☆133Mar 5, 2026Updated 6 months ago
- Small utility script to notify via Slack about Hashcat's progress during a password cracking session☆10Mar 10, 2019Updated 7 years ago
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- ☆177Jan 26, 2021Updated 5 years ago