ThreatHunter-Playbook by OTRF
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
created at March 28, 2017, 3:07 a.m.
volatility by volatilityfoundation
An advanced memory forensics framework
created at April 24, 2014, 3:45 p.m.
viper by viper-framework
Binary analysis and management framework
created at Nov. 9, 2013, 6:24 p.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
LogonTracer by JPCERTCC
Investigate malicious Windows logon by visualizing and analyzing Windows event log
created at Nov. 24, 2017, 6:07 a.m.
DidierStevensSuite by DidierStevens
Please no pull requests for this repository. Thanks!
created at May 8, 2015, 11:21 a.m.
osxcollector by Yelp
A forensic evidence collection & analysis toolkit for OS X
created at Aug. 4, 2014, 6:25 p.m.
streamalert by airbnb
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
created at Jan. 22, 2017, 1:10 a.m.
metta by uber-common
An information security preparedness tool to do adversarial simulation.
created at Nov. 1, 2017, 9:24 p.m.
artifacts by ForensicArtifacts
Digital Forensics artifact repository
created at Oct. 31, 2014, 7:13 p.m.