279 Open source projects that are alternatives of or similar to pyarascanner

DFIRTrack - The Incident Response Tracking Application

A knowledge base of actionable Incident Response techniques

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

Python script to decode common encoded PowerShell scripts

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Yara Based Detection Engine for web browsers

🔮 Visibility Across Space and Time

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Python API Client for Cortex

Recon Hunt Queries

Invoke-LiveResponse

Cortex Analyzers Repository

C# wrapper around the Yara pattern matching library

ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.

Validates yara rules and tries to repair the broken ones.

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

Loki - Simple IOC and Incident Response Scanner

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

Defanged Indicator of Compromise (IOC) Extractor.

Trace ScriptBlock execution for powershell v2

Parses Windows event logs files based on SANS Poster

Incident Response - Fast suspicious file finder

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Documentation of TheHive

A curated list of tools for incident response

All-in-one bundle of MISP, TheHive and Cortex

Python API Client for TheHive

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

Yara scan Phishing Kit's Zip archive(s)

A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.

Yara rules written by me, for free use.

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

Digital Forensics Investigation Platform

Signature base for my scanner tools

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

Exporting MISP event attributes to yara rules usable with Thor apt scanner

Extract and aggregate threat intelligence.

PS / Bash / Python / Other scripts For FUN!

Imago is a python tool that extract digital evidences from images.

Carve file metadata from NTFS index ($I30) attributes

A list of cyber-chef recipes and curated links

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Docker configurations for TheHive, Cortex and 3rd party tools

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

incident response scripts

Catalyst is an open source SOAR system that helps to automate alert handling and incident response processes

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

Cortex: a Powerful Observable Analysis and Active Response Engine

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Live system forensic collector

Forensics artefact collection tool for systems running Microsoft Windows

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation and geolocation lookup tool / Traceroute server

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

Detecting ATT&CK techniques & tactics for Linux