GRR Rapid Response: remote live forensics for incident response
Repository Index
47,133 repositories indexed
1–10 of 10 · Most stars
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
- threat-hunting
- purpleteam
- python3
- windows-eventlog
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Memory acquisition for Linux that makes sense.
Tool used for dumping memory from Android devices
Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
- acquisition
- cybersecurity
- forensics
- iscsi