656 Open source projects that are alternatives of or similar to Cyberchef Recipes

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

DFIRTrack - The Incident Response Tracking Application

A curated list of tools for incident response

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

PS / Bash / Python / Other scripts For FUN!

Python script to decode common encoded PowerShell scripts

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

Trace ScriptBlock execution for powershell v2

Carve file metadata from NTFS index ($I30) attributes

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

FAME Automates Malware Evaluation

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

Python API Client for Cortex

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

🔮 Visibility Across Space and Time

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

ThePhish: an automated phishing email analysis tool

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

Docker configurations for TheHive, Cortex and 3rd party tools

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Yara Based Detection Engine for web browsers

Recon Hunt Queries

Digital Forensics Investigation Platform

Catalyst is an open source SOAR system that helps to automate alert handling and incident response processes

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Cortex: a Powerful Observable Analysis and Active Response Engine

incident response scripts

Malcom - Malware Communications Analyzer

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

VirusTotal Wanna Be - Now with 100% more Hipster

Incident Response - Fast suspicious file finder

Python API Client for TheHive

All-in-one bundle of MISP, TheHive and Cortex

Imago is a python tool that extract digital evidences from images.

Invoke-LiveResponse

A knowledge base of actionable Incident Response techniques

Forensics artefact collection tool for systems running Microsoft Windows

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

Who and what to follow in the world of cyber security

Live system forensic collector

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

Parses Windows event logs files based on SANS Poster

Cortex Analyzers Repository

No description or website provided.

Information gathering & website reconnaissance | https://phishstats.info/

Documentation of TheHive

Automation and Scaling of Digital Forensics Tools

Open source incident management and response platform.

WinDBG Anti-RootKit Extension

A tool for studying JavaScript malware.

Demos of various injection techniques found in malware

OPCDE Cybersecurity Conference Materials

morphHTA - Morphing Cobalt Strike's evil.HTA