dfir
Here are 563 public repositories matching this topic...
🏴☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration day to day tasks 😉
-
Updated
Jun 11, 2024 - Python
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
-
Updated
Jun 11, 2024 - Python
Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.
-
Updated
Jun 11, 2024 - Python
UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.
-
Updated
Jun 11, 2024 - Shell
This tool is designed to support the investigation of Unified Audit Logs. The tool processes the logs, enriches IP addresses, offers filtering and provides visualizations.
-
Updated
Jun 11, 2024 - Python
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
-
Updated
Jun 11, 2024 - Rust
A cross platform forensic parser written in Rust!
-
Updated
Jun 11, 2024 - Rust
Your Everyday Threat Intelligence
-
Updated
Jun 10, 2024 - Python
YARA signature and IOC database for my scanners and tools
-
Updated
Jun 10, 2024 - YARA
A curated list of tools for incident response. With repository stars⭐ and forks🍴
-
Updated
Jun 10, 2024
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
-
Updated
Jun 10, 2024 - Python
Convert Kape Files to DFIR-ORC configurations
-
Updated
Jun 9, 2024 - Python
Harness the power of Splunk for your investigations
-
Updated
Jun 9, 2024 - Shell
yara detection rules for hunting with the threathunting-keywords project
-
Updated
Jun 9, 2024 - YARA
Forensic Artifacts Collecting Toolkit
-
Updated
Jun 8, 2024 - Go
Automation and Scaling of Digital Forensics Tools
-
Updated
Jun 11, 2024 - Python
Improve this page
Add a description, image, and links to the dfir topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dfir topic, visit your repo's landing page and select "manage topics."