digital-forensics

There are 82 repositories under digital-forensics topic.

cugu / awesome-forensics
A curated list of awesome forensic analysis tools and resources
computer-forensics dfir digital-forensics forensic-analysis free open-source
3876
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
agplv3 analyzer api cortex dfir digital-forensics free incident-management incident-response incident-response-tooling investigations iocs misp open-source orchestration platform rest scala security-incidents thehive
Language:Scala 3372
velociraptor
Velocidex / velociraptor
Digging Deeper....
digital-forensics endpoint-discovery endpoint-protection endpoint-security forensics-investigations incident-response inventory-management
Language:Go 2879
simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
digital-forensics forensics tcp-protocol tcpip
Language:C++ 1678
MemLabs
stuxnet999 / MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
ctf ctf-challenges cybersecurity dfir digital-forensics forensics memory-forensics security windows
Language:Shell 1628
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
alerting cyber-security detection-engineering dfir digital-forensics digitalforensicreadiness digitalforensics forensic-analysis forensics forensics-investigations forensics-tools intrusion-detection mitre-attack network-security offensive-security osint port-scanning security siem threat-intelligence
Language:Python 1598
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
analysis analyzer api cortex cyber-threat-intelligence dfir digital-forensics engine free free-software incident-response iocs observable open-source python response rest scala security-incidents thehive
Language:Scala 1319
beagle
yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
security digital-forensics incident-response graph dfir forensic-analysis threat-hunting
Language:Python 1268
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
attack cyberdefense cybersecurity detection digital-forensics email free incident-response indicators-of-compromise malware misp phishing phishing-detection python script thehive thehive4 thehive4py threat-intelligence webapp
Language:Python 1120
rezaduty / cybersecurity-career-path
Cybersecurity Career Path
cyber-threat-analyst cybersecurity-career-path digital-forensics pentesting roadmap
1088
dfir-iris / iris-web
Collaborative Incident Response platform
csirt-tooling digital-forensics digital-forensics-incident-response forensic forensic-analysis forensic-tools incident-response python
Language:JavaScript 1035
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
awesome-list computer-fore digital-forensics forensic-analysis forensic-tools forensics forensics-investigations free image-analysis linux macos metada metadata network open-source timeline tools windows
1017
sepinf-inc / IPED
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
forensic recovery digital-forensics
Language:Java 943
whatfiles
spieglt / whatfiles
Log what files are accessed by any Linux process
filesystem-events digital-forensics linux-utilities
Language:C 939
AzureHunter
darkquasar / AzureHunter
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
azforensics azure azure-forensics azuresearcher cloud-forensics cybersecurity dfir digital-forensics incident-response powershellv5 threat-hunting threathunting unifiedauditlog
Language:PowerShell 769
Kuiper
DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
dfir security incident-response artifacts parser digital-forensics
Language:JavaScript 758
AvillaDaniel / AvillaForensics
Avilla Forensics 3.0
mobile forensics whatsapp telegram signal adb android adb-commands ios apktool forensics-tools downgrade downgrade-attack forensic-analysis devices instagram extrator mobile-forensics digital-forensics whatsapp-parser
Language:C# 685
ashemery / LinuxForensics
Everything related to Linux Forensics
dfir digital-forensics forensics investigations linux
Language:Shell 672
evild3ad / MemProcFS-Analyzer
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
dfir digital-forensics incident-response live-response memory-forensics memprocfs powershell
Language:PowerShell 484
dfirtrack / dfirtrack
DFIRTrack - The Incident Response Tracking Application
dfir digital-forensics incident-management incident-response incident-response-tooling
Language:Python 479
ivbeg / awesome-forensicstools
Awesome list of digital forensic tools
awesome awesome-list forensics forensic-analysis digital-forensics metadata investigative-journalism
477
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
thehive analyzer cortex free free-software open-source observable ioc json incident-response digital-forensics dfir cyber-threat-intelligence python enrichment
Language:Python 430
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
misp security-incidents iocs thehive cortex administration-guide analyzer rest api incident-response digital-forensics analyst dfir free free-software documentation open-source platform thehive-project
391
Linux-Incident-Response
vm32 / Linux-Incident-Response
practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response
digital-forensics digital-forensics-incident-response incident-response ir linux
Language:Shell 356
cyb3rmik3 / MDE-DFIR-Resources
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
curated-collections curated-list dfir digital-forensics digital-forensics-incident-response incident-response live-response mde microsoft microsoft-defender-for-endpoint resources kql kusto kusto-query kusto-query-language
348
catalyst
SecurityBrewery / catalyst
Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
soar incident-response digital-forensics dfir
Language:Vue 326
digitalisx / awesome-memory-forensics
A curated list of awesome Memory Forensics for DFIR
digital-forensics incident-response digital-forensics-incident-response memory memory-analysis malware awesome-list awesome malware-analysis malware-research forensics
319
horus
6abd / horus
An OSINT / digital forensics tool built in Python
investigations osint python security security-tools api crypto cryptocurrency cybersecurity decryption digital-forensics encryption forensics investigation location requests steganography tool tools hacktoberfest
Language:Python 317
dfir-toolkit
dfir-dd / dfir-toolkit
CLI tools for forensic investigation of Windows artifacts
cli dfir digital-forensics digital-forensics-incident-response forensic-analysis forensics forensics-tools rust rust-lang
Language:Rust 300
RealityNet / kobackupdec
Huawei backup decryptor
python3 huawei android decryption digital-forensics
Language:Python 290
MK-Ware / Forensic-Tools
A collection of tools for forensic analysis
forensic-analysis python cookie extract-metadata parse exif-extractor metadata metadata-extraction forensics exif-data-extraction exif-metadata exif whatsapp firefox chrome skype facebook facebook-messenger html-table digital-forensics
Language:Python 273
forensicanalysis / artifactcollector
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
dfir digital-forensics forensicartifacts
Language:Go 264
windows-forensic-artifacts
Psmths / windows-forensic-artifacts
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
forensics artifacts dfir windows windows-11 analysis reference digital-forensics forensic-analysis forensicartifacts forensics-investigations
249
evild3ad / Collect-MemoryDump
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
powershell dfir digital-forensics incident-response live-response memory-acquisition memory-forensics
Language:PowerShell 215
TheHive-Project / TheHive4py
Python API Client for TheHive
thehive incident-response digital-forensics free-software open-source dfir free api-client api python
Language:Python 213
c-aff4
Velocidex / c-aff4
An AFF4 C++ implementation.
compression-formats compression-library digital-forensics forensics
Language:C++ 187

digital-forensics

cugu / awesome-forensics

TheHive-Project / TheHive

Velocidex / velociraptor

simsong / tcpflow

stuxnet999 / MemLabs

mikeroyal / Digital-Forensics-Guide

TheHive-Project / Cortex

yampelo / beagle

emalderson / ThePhish

rezaduty / cybersecurity-career-path

dfir-iris / iris-web

mesquidar / ForensicsTools

sepinf-inc / IPED

spieglt / whatfiles

darkquasar / AzureHunter

DFIRKuiper / Kuiper

AvillaDaniel / AvillaForensics

ashemery / LinuxForensics

evild3ad / MemProcFS-Analyzer

dfirtrack / dfirtrack

ivbeg / awesome-forensicstools

TheHive-Project / Cortex-Analyzers

TheHive-Project / TheHiveDocs

vm32 / Linux-Incident-Response

cyb3rmik3 / MDE-DFIR-Resources

SecurityBrewery / catalyst

digitalisx / awesome-memory-forensics

6abd / horus

dfir-dd / dfir-toolkit

RealityNet / kobackupdec

MK-Ware / Forensic-Tools

forensicanalysis / artifactcollector

Psmths / windows-forensic-artifacts

evild3ad / Collect-MemoryDump

TheHive-Project / TheHive4py

Velocidex / c-aff4