hindsight by obsidianforensics
Web browser forensics for Google Chrome/Chromium
created at May 22, 2014, 3:25 a.m.
artifacts by ForensicArtifacts
Digital Forensics artifact repository
created at Oct. 31, 2014, 7:13 p.m.
DumpsterFire by TryCatchHCF
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
created at Oct. 5, 2017, 11:44 p.m.
zentral by zentralopensource
Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.
created at Oct. 20, 2015, 2:03 p.m.
stringsifter by mandiant
A machine learning tool that ranks strings based on their relevance for malware analysis.
created at Sept. 5, 2019, 1:02 p.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
MalConfScan by JPCERTCC
Volatility plugin for extracts configuration data of known malware
created at April 22, 2019, 12:23 a.m.
dftimewolf by log2timeline
A framework for orchestrating forensic collection, processing and data export
created at July 29, 2016, 1:54 p.m.
VolatilityBot by mkorman90
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
created at Feb. 4, 2015, 3:13 p.m.
hostintel by keithjjones
A modular Python application to collect intelligence for malicious hosts.
created at Aug. 22, 2016, 8:25 p.m.