219 Open source projects that are alternatives of or similar to catalyst

Carve file metadata from NTFS index ($I30) attributes

DFIRTrack - The Incident Response Tracking Application

Python API Client for TheHive

Cortex: a Powerful Observable Analysis and Active Response Engine

Digital Forensics Investigation Platform

Cortex Analyzers Repository

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Documentation of TheHive

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

🔮 Visibility Across Space and Time

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system

📇 Digital Forensics Artifact Repository (forensicanalysis edition)

Everything related to Linux Forensics

incident response scripts

Incident Response - Fast suspicious file finder

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

A curated list of tools for incident response

A list of cyber-chef recipes and curated links

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

ThePhish: an automated phishing email analysis tool

Recon Hunt Queries

Digging Deeper....

Python API Client for Cortex

Parses Windows event logs files based on SANS Poster

A Lambda-powered Security Orchestration framework for AWS GuardDuty

Trace ScriptBlock execution for powershell v2

Educational, CTF-styled labs for individuals interested in Memory Forensics

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

A curated list of awesome forensic analysis tools and resources

CIRCL system forensic tools or a jumble of tools to support forensic

Cyber-investigation Analysis Standard Expression (CASE) Ontology

PS / Bash / Python / Other scripts For FUN!

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

Python script to decode common encoded PowerShell scripts

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Docker configurations for TheHive, Cortex and 3rd party tools

A knowledge base of actionable Incident Response techniques

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

All-in-one bundle of MISP, TheHive and Cortex

Invoke-LiveResponse

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

Imago is a python tool that extract digital evidences from images.

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

Forensics artefact collection tool for systems running Microsoft Windows

Live system forensic collector

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

SQL optimizer and rewriter. - SQL 优化、重写器(辅助 SQL 调优)。

No description or website provided.

Wazuh - Ansible playbook

Wazuh - Amazon AWS Cloudformation

DDTTX Tabletop Trainings

Cybersecurity Career Path

Analyst Unknown Cyber Range - a micro web service framework

django-base-templates 主要为 django 开发DEMO, 支持 非前后端分离 和 前后端分离模式 。