Awesome Open Source
Search
Programming Languages
Languages
All Categories
Categories
About

The Top 23 Dfir Open Source Projects

Open source projects categorized as Dfir
Categories > Operations > Dfir
Windowstimeline ⭐ 155
Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)
most recent commit a year ago
Mthc ⭐ 154
All-in-one bundle of MISP, TheHive and Cortex
most recent commit 2 years ago
Gene ⭐ 149
Signature engine for all your logs
dependent packages 1total releases 33most recent commit 6 months ago
Win10 ⭐ 149
Win 10/11 related research
most recent commit 4 months ago
Zombieant ⭐ 149
Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.
most recent commit 5 years ago
Imago Forensics ⭐ 144
Imago is a python tool that extract digital evidences from images.
total releases 3most recent commit 5 years ago
Invoke Liveresponse ⭐ 141
Invoke-LiveResponse
most recent commit 2 years ago
Cirtkit ⭐ 140
Tools for the Computer Incident Response Team 💻
most recent commit 7 years ago
Cops ⭐ 138
Collaborative Open Playbook Standard
most recent commit 9 months ago
Oriana ⭐ 136
Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
most recent commit 4 years ago
Rita J ⭐ 134
Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.
most recent commit 2 years ago
Awesome Kape ⭐ 123
A curated list of KAPE-related resources
most recent commit 4 months ago
Cdir ⭐ 120
CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
most recent commit 2 years ago
Fucking Awesome Incident Response ⭐ 113
A curated list of tools for incident response. With repository stars⭐ and forks🍴
most recent commit 3 months ago
Dfir4vsphere ⭐ 110
Powershell module for VMWare vSphere forensics
most recent commit a year ago
Mftecmd ⭐ 110
Parses $MFT from NTFS file systems
most recent commit 9 months ago
Autotimeliner ⭐ 108
Automagically extract forensic timeline from volatile memory dump
most recent commit a year ago
Rdpcachestitcher ⭐ 106
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
most recent commit 3 years ago
Recmd ⭐ 106
Command line access to the Registry
most recent commit 10 months ago
Cacador ⭐ 106
Indicator Extractor
total releases 1most recent commit 6 years ago
Hashlookup Forensic Analyser ⭐ 105
Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
most recent commit 7 months ago
Hayabusa Rules ⭐ 101
Detection rules for Hayabusa
most recent commit 3 months ago
Vanillawindowsreference ⭐ 99
A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!
most recent commit 8 months ago
Popular Operations Categories
Deployment
Logger
Metrics
Monitoring
Monitor
Prometheus
Grafana
Error Reporting
Tracing
Systemd
Categories
Privacy | About | Terms | Follow Us On Twitter

Downloads, Dependent Repos, Dependent Packages, Total Releases, Latest Releases data powered by Libraries.io.

Copyright 2018-2024 Awesome Open Source.  All rights reserved.