VolDiff by aim4r

VolDiff: Malware Memory Footprint Analysis based on Volatility

updated at March 26, 2024, 6:38 a.m.

28 +0

192 +0

50 +0

cuckoo-modified by spender-sandbox

Modified edition of cuckoo

updated at March 26, 2024, 7:39 p.m.

72 +0

388 +0

178 +0

scot by sandialabs

Sandia Cyber Omni Tracker (SCOT)

updated at March 31, 2024, 6:13 a.m.

38 +0

242 +0

48 +0

evolve by JamesHabben

Web interface for the Volatility Memory Forensics Framework

updated at April 4, 2024, 10:44 p.m.

38 +0

259 +0

42 +0

artifacts-kb by ForensicArtifacts

Digital Forensics Artifacts Knowledge Base

updated at April 5, 2024, 10:45 p.m.

8 +0

69 +0

15 +0

winreg-kb by libyal

Windows Registry Knowledge Base

updated at April 9, 2024, 6:50 a.m.

16 +0

151 +0

20 +0

VolatilityBot by mkorman90

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

updated at April 9, 2024, 9:41 p.m.

27 +0

259 +0

59 +0

spyre by spyre-project

simple YARA-based IOC scanner

updated at April 11, 2024, 10:31 a.m.

12 +0

159 +0

27 +0

mutablesecurity by MutableSecurity

CLI program for automating the setup, configuration, and use of cybersecurity solutions

updated at April 12, 2024, 10:36 p.m.

1 +0

41 +0

6 +0

Invoke-LiveResponse by mgreen27

Invoke-LiveResponse

updated at April 16, 2024, 12:32 a.m.

13 +0

144 +0

29 +0

SysmonSearch by JPCERTCC

Investigate suspicious activity by visualizing Sysmon's event log

updated at April 18, 2024, 9:47 a.m.

44 +0

409 +0

58 +0

Fastir_Collector by SekoiaLab

None

updated at April 23, 2024, 6:22 a.m.

63 +0

502 +0

128 +0

incident-response-docs by PagerDuty

PagerDuty's Incident Response Documentation.

updated at April 24, 2024, 3:02 p.m.

68 +0

1,009 +0

222 +0

bitscout by vitaly-kamluk

Remote forensics meta tool

updated at April 24, 2024, 5:26 p.m.

49 +0

437 +0

105 +0

Hoarder by muteb

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

updated at April 25, 2024, 5:48 p.m.

10 +0

187 +0

18 +0

stenographer by google

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. Discussion/announcements at stenographer@googlegroups.com

updated at April 25, 2024, 6:46 p.m.

104 +0

1,788 +0

232 +1

threat_note by DefensePointSecurity

DPS' Lightweight Investigation Notebook

updated at April 27, 2024, 8:49 a.m.

57 +0

420 +0

97 +0

nightHawkResponse by biggiesmallsAG

Incident Response Forensic Framework

updated at April 27, 2024, 8:49 a.m.

82 +0

596 +0

139 +0

margaritashotgun by ThreatResponse

Remote Memory Acquisition Tool

updated at April 27, 2024, 8:50 a.m.

17 +0

235 +0

50 +0

ir-rescue by diogo-fernan

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

updated at April 27, 2024, 8:50 a.m.

45 +0

447 +0

93 +0