MindMaps#ThreatHunting #DFIR #Malware #Detection Mind Maps
Stars: ✭ 224 (+1217.65%)
Mutual labels: incident-response, forensics, dfir, threat-hunting
Invoke LiveresponseInvoke-LiveResponse
Stars: ✭ 115 (+576.47%)
Mutual labels: incident-response, forensics, dfir
CDIRCDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library
Stars: ✭ 122 (+617.65%)
Mutual labels: incident-response, forensics, dfir
PypowershellxrayPython script to decode common encoded PowerShell scripts
Stars: ✭ 192 (+1029.41%)
Mutual labels: incident-response, forensics, dfir
BeagleBeagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
Stars: ✭ 976 (+5641.18%)
Mutual labels: incident-response, dfir, threat-hunting
ThreathuntThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.
Stars: ✭ 92 (+441.18%)
Mutual labels: incident-response, dfir, threat-hunting
OrianaOriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.
Stars: ✭ 152 (+794.12%)
Mutual labels: incident-response, dfir, threat-hunting
rhqRecon Hunt Queries
Stars: ✭ 66 (+288.24%)
Mutual labels: incident-response, dfir, threat-hunting
PackratLive system forensic collector
Stars: ✭ 16 (-5.88%)
Mutual labels: incident-response, forensics, dfir
TA-Sysmon-deployDeploy and maintain Symon through the Splunk Deployment Sever
Stars: ✭ 31 (+82.35%)
Mutual labels: dfir, sysmon, threat-hunting
RdpCacheStitcherRdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
Stars: ✭ 176 (+935.29%)
Mutual labels: incident-response, forensics, dfir
Ir RescueA Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
Stars: ✭ 311 (+1729.41%)
Mutual labels: incident-response, forensics, dfir
INDXRipperCarve file metadata from NTFS index ($I30) attributes
Stars: ✭ 32 (+88.24%)
Mutual labels: incident-response, forensics, dfir
uacUAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.
Stars: ✭ 260 (+1429.41%)
Mutual labels: incident-response, forensics, dfir
ThreatpinchlookupDocumentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
Stars: ✭ 257 (+1411.76%)
Mutual labels: incident-response, dfir, threat-hunting
MthcAll-in-one bundle of MISP, TheHive and Cortex
Stars: ✭ 134 (+688.24%)
Mutual labels: incident-response, dfir, threat-hunting
Threathunter PlaybookA Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
Stars: ✭ 2,879 (+16835.29%)
Mutual labels: dfir, sysmon, threat-hunting
fastfinderIncident Response - Fast suspicious file finder
Stars: ✭ 116 (+582.35%)
Mutual labels: incident-response, dfir, threat-hunting
CCXDiggerThe CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.
Stars: ✭ 45 (+164.71%)
Mutual labels: incident-response, forensics, dfir
MEATThis toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices
Stars: ✭ 101 (+494.12%)
Mutual labels: incident-response, forensics, dfir
