w8mej / IRKnowledgeLinks
A curated list of tools for incident response
☆34Updated last year
Alternatives and similar repositories for IRKnowledge
Users that are interested in IRKnowledge are comparing it to the libraries listed below
Sorting:
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Updated 8 years ago
- My personal Automated Malware Analysis Sandboxes and Services☆23Updated 8 years ago
- GUI Tool to generate threat intelligence information in various formats☆44Updated 7 years ago
- Collection of single use scripts I worte for windows forensics☆27Updated 13 years ago
- Discover potential timestamps within the Windows Registry☆19Updated 11 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆41Updated 5 years ago
- Script to parse Process Monitor XML log file, and give you a summary report.☆24Updated 9 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆25Updated 2 years ago
- Set of PoC for exploits for QRadar SIEM☆15Updated 7 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 5 years ago
- Tool for analysts to perform simultaneous lookups (IP, Domain, URL, MD5) against multiple data sources☆29Updated 8 years ago
- Digital Forensics and Incident Response Wiki☆40Updated 11 years ago
- ANWI - All New Wireless IDS☆28Updated last month
- PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts☆56Updated 5 years ago
- A short and small memory forensics helper.☆52Updated 8 years ago
- Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed …☆21Updated 10 years ago
- Lite version of PDF X-RAY that uses no backend☆38Updated 14 years ago
- Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection☆36Updated 7 years ago
- The repository for Building visualisation platforms for OSINT data using open source solutions☆29Updated 7 years ago
- This document proposes a way of standardising the structure, language, and grammar used in security policies.☆26Updated 7 years ago
- This is a python version of samesame repo to generate homograph strings☆24Updated 7 years ago
- Library and tools to access the Windows Hibernation File (hiberfil.sys) format☆12Updated last week
- Basic file metadata gathering script☆21Updated 8 months ago
- Checks observables/ioc in TheHive/Cortex against the MISP warningslists☆14Updated 8 years ago
- The Shodan monitoring tools allows you to monitor shodan listed servers basis on the filter you provided☆33Updated 4 years ago
- This repository is a curated list of pro bono incident response entities.☆21Updated 2 years ago
- Traceroute improved wrapper for CSIRT and CERT operators☆39Updated last year
- Linux and Windows Hardening Points☆12Updated 7 years ago
- IoC's, PCRE's, YARA's etc☆24Updated 9 months ago
- Get detailed information about a Twitter user activity☆17Updated 8 years ago