264 Open source projects that are alternatives of or similar to Historicprocesstree

A curated list of tools for incident response

Documentation of TheHive

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

Trace ScriptBlock execution for powershell v2

Cortex: a Powerful Observable Analysis and Active Response Engine

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

Python API Client for Cortex

#ThreatHunting #DFIR #Malware #Detection Mind Maps

🔮 Visibility Across Space and Time

Incident Response - Fast suspicious file finder

Live system forensic collector

Parses Windows event logs files based on SANS Poster

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

All-in-one bundle of MISP, TheHive and Cortex

Python script to decode common encoded PowerShell scripts

Imago is a python tool that extract digital evidences from images.

Cortex Analyzers Repository

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

Carve file metadata from NTFS index ($I30) attributes

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Catalyst is an open source SOAR system that helps to automate alert handling and incident response processes

DFIRTrack - The Incident Response Tracking Application

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Docker configurations for TheHive, Cortex and 3rd party tools

A knowledge base of actionable Incident Response techniques

A list of cyber-chef recipes and curated links

Forensics artefact collection tool for systems running Microsoft Windows

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

incident response scripts

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Invoke-LiveResponse

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

Python API Client for TheHive

PS / Bash / Python / Other scripts For FUN!

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Recon Hunt Queries

Digital Forensics Investigation Platform

A simple and elegant checkbox tree for React.

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

A Tree Plugin For Vue2.0+

📇 Digital Forensics Artifact Repository (forensicanalysis edition)

Educational, CTF-styled labs for individuals interested in Memory Forensics

Automation and Scaling of Digital Forensics Tools

Collection of tree view components for front-end frameworks. 🌳

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

Virtual Treeview is a Delphi treeview control

Malcom - Malware Communications Analyzer

PagerDuty's Incident Response Documentation.

Digging Deeper....

Extract and aggregate threat intelligence.

An android tree structure view with high performance and rich features

Gijgo - Free Javascript Controls

Wazuh - Chef cookbooks

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions