The repository host gives no description.
Repository Index
47,133 repositories indexed
73–96 of 108 · Most stars
'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files
Open Source SIEM (Security Information and Event Management system).
- siem
- risk-management
- risk-assessment
- vulnerability-management
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
"Evolving AppCompat/AmCache data analysis beyond grep"
Apache Logfile Security Analyzer
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
Windows Live Artifacts Acquisition Script
Command line access to the Registry
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
The repository host gives no description.
Follow stolen crypto hop by hop across Bitcoin, Ethereum, TRON, BNB Chain and Solana. Labels where the money landed, keeps proof for every clue, writes the report.
Cross-platform, open-source shellbag parser
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
Command line utility and Python package to ease the (un)mounting of forensic disk images
acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.
Checks with NSRL RDS servers looking for for hash matches
The repository host gives no description.
The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
Tool used for dumping memory from Android devices