RedHunt-OS by redhuntlabs
Virtual Machine for Adversary Emulation and Threat Hunting
created at March 14, 2018, 7:31 p.m.
streamalert by airbnb
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
created at Jan. 22, 2017, 1:10 a.m.
stenographer by google
Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com
created at Oct. 13, 2014, 9:26 p.m.
APTSimulator by NextronSystems
A toolset to make a system look as if it was the victim of an APT attack
created at Feb. 3, 2018, 2:19 p.m.
osxcollector by Yelp
A forensic evidence collection & analysis toolkit for OS X
created at Aug. 4, 2014, 6:25 p.m.
DidierStevensSuite by DidierStevens
Please no pull requests for this repository. Thanks!
created at May 8, 2015, 11:21 a.m.
LogonTracer by JPCERTCC
Investigate malicious Windows logon by visualizing and analyzing Windows event log
created at Nov. 24, 2017, 6:07 a.m.
EVTX-ATTACK-SAMPLES by sbousseaden
Windows Events Attack Samples
created at March 15, 2019, 8:45 a.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
viper by viper-framework
Binary analysis and management framework
created at Nov. 9, 2013, 6:24 p.m.
PowerForensics by Invoke-IR
PowerForensics provides an all in one platform for live disk forensic analysis
created at March 7, 2015, 5:12 p.m.
sysmon-modular by olafhartong
A repository of sysmon configuration modules
created at Jan. 13, 2018, 9:20 p.m.
awesome-forensics by cugu
⭐️ A curated list of awesome forensic analysis tools and resources
created at March 29, 2016, 8:54 p.m.
OSXAuditor by jipegit
OS X Auditor is a free Mac OS X computer forensics tool
created at June 19, 2013, 5:26 p.m.