Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About

The Top 23 Windows Dfir Open Source Projects

Open source projects categorized as Windows Dfir
Chainsaw ⭐ 2,519
Rapidly Search and Hunt through Windows Forensic Artefacts
total releases 1most recent commit a month ago
Hayabusa ⭐ 1,800
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
most recent commit 3 months ago
Whids ⭐ 921
Open Source EDR for Windows
total releases 21most recent commit a year ago
Memlabs ⭐ 689
Educational, CTF-styled labs for individuals interested in Memory Forensics
most recent commit 3 years ago
Forensicstools ⭐ 682
A list of free and open forensics analysis tools and other resources
most recent commit 6 months ago
Dfirartifactmuseum ⭐ 506
The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifacts that may no longer be readily available anymore.
most recent commit 6 months ago
Wela ⭐ 494
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
most recent commit a year ago
Adtimeline ⭐ 398
Timeline of Active Directory changes with replication metadata
most recent commit 10 months ago
Enablewindowslogsettings ⭐ 343
Documentation and scripts to properly enable Windows event logs.
most recent commit 7 months ago
Ir Rescue ⭐ 309
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
most recent commit 3 years ago
Detectionlabelk ⭐ 299
DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
most recent commit 3 years ago
Trawler ⭐ 224
PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.
most recent commit 8 months ago
Artifactcollector ⭐ 184
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
dependent packages 1total releases 27most recent commit a year ago
Mindmaps ⭐ 172
#ThreatHunting #DFIR #Malware #Detection Mind Maps
most recent commit 2 years ago
Regrippy ⭐ 166
A modern Python-3-based alternative to RegRipper
total releases 3most recent commit 6 months ago
Pecmd ⭐ 156
Prefetch Explorer Command Line
most recent commit 8 months ago
Windowstimeline ⭐ 155
Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
most recent commit a year ago
Win10 ⭐ 149
Win 10/11 related research
most recent commit 4 months ago
Oriana ⭐ 136
Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
most recent commit 4 years ago
Hayabusa Rules ⭐ 101
Detection rules for Hayabusa
most recent commit 3 months ago
Vanillawindowsreference ⭐ 99
A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!
most recent commit 8 months ago
Appcompatcacheparser ⭐ 80
AppCompatCache (shimcache) parser. Supports Windows 7 (x86 and x64), Windows 8.x, and Windows 10
total releases 1most recent commit 10 months ago
Queries ⭐ 60
SQLite queries
most recent commit a year ago
The 5 Latest Releases In Windows Dfir Open Source Projects
Chainsaw ⭐ 2,519
Rapidly Search and Hunt through Windows Forensic Artefacts
total releases 1latest release November 15, 2023most recent commit a month ago
Whids ⭐ 921
Open Source EDR for Windows
total releases 21latest release August 08, 2022most recent commit a year ago
Regrippy ⭐ 166
A modern Python-3-based alternative to RegRipper
total releases 3latest release February 16, 2022most recent commit 6 months ago
Artifactcollector ⭐ 184
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
dependent packages 1total releases 27latest release January 08, 2022most recent commit a year ago
Popular Operations Categories
Deployment
Logger
Metrics
Monitoring
Monitor
Prometheus
Grafana
Error Reporting
Tracing
Systemd
Categories
Privacy | About | Terms | Follow Us On Twitter

Downloads, Dependent Repos, Dependent Packages, Total Releases, Latest Releases data powered by Libraries.io.

Copyright 2018-2024 Awesome Open Source.  All rights reserved.