Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
Repository Index
47,133 repositories indexed
25–48 of 51 · Most stars
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
Crash Team Racing: Nitro-Fueled (PS4) running natively on Windows 10/11. Windows fork of SacredFire, built on bbport and shadPS4. No game files included.
- crash-team-racing
- ctr
- shadps4
- vulkan
Collection of Event ID ressources useful for Digital Forensics and Incident Response
Experimental Online Crash Team Racing: Nitro-Fueled (PS4) running natively on Windows 10/11. Windows fork of SacredFire, built on bbport and shadPS4. No game files included. Status: https://octr.ryu7w7.xyz
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
DFIRTrack - The Incident Response Tracking Application
- incident-response
- digital-forensics
- dfir
- incident-response-tooling
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- cybersecurity
- incident-response
- sysinternals
- nirsoft
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
Making dynamic surveys should be easy!
- rails
- ruby
- survey-app
- survey-form
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
EA SPORTS UFC 3 (PS4) native port for Linux and Windows — SacredFire/bbport runtime + shadPS4-derived Vulkan renderer
Firebase Cloud Firestore support library for iOS. 🧢
- cloudfirestore
- firebase
- firebase-storage
- firebase-firestore
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
🐧 Security-focused Linux distribution with 140+ tools, custom kernel 6.17.13, AI assistant | 5 editions | Cloud, AI/ML, Automotive, Hardware hacking
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Web Service/ API for Alexa and Google Home Node-RED Smart Home Control
- node-red
- alexa-skill
- home-automation
- alexa-custom-skill
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
A Node-RED node to control things via Amazon Alexa *and* Google Home
Digital forensic (DFIR) specialist roadmap.
- chfi
- cyber-defense
- cyber-forensics
- dfir