digital-forensics

There are 81 repositories under digital-forensics topic.

cugu / awesome-forensics
A curated list of awesome forensic analysis tools and resources
computer-forensics dfir digital-forensics forensic-analysis free open-source
3875
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
misp security-incidents analyzer iocs thehive digital-forensics incident-response rest api scala investigations dfir free open-source platform cortex agplv3 orchestration incident-management incident-response-tooling
Language:Scala 3370
velociraptor
Velocidex / velociraptor
Digging Deeper....
digital-forensics endpoint-discovery endpoint-protection endpoint-security forensics-investigations incident-response inventory-management
Language:Go 2881
simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
digital-forensics forensics tcp-protocol tcpip
Language:C++ 1677
MemLabs
stuxnet999 / MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
ctf ctf-challenges cybersecurity dfir digital-forensics forensics memory-forensics security windows
Language:Shell 1628
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
alerting cyber-security detection-engineering dfir digital-forensics digitalforensicreadiness digitalforensics forensic-analysis forensics forensics-investigations forensics-tools intrusion-detection mitre-attack network-security offensive-security osint port-scanning security siem threat-intelligence
Language:Python 1598
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1318
beagle
yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
dfir digital-forensics forensic-analysis graph incident-response security threat-hunting
Language:Python 1269
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1120
rezaduty / cybersecurity-career-path
Cybersecurity Career Path
cyber-threat-analyst cybersecurity-career-path digital-forensics pentesting roadmap
1089
dfir-iris / iris-web
Collaborative Incident Response platform
csirt-tooling digital-forensics digital-forensics-incident-response forensic forensic-analysis forensic-tools incident-response python
Language:JavaScript 1034
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
awesome-list computer-fore digital-forensics forensic-analysis forensic-tools forensics forensics-investigations free image-analysis linux macos metada metadata network open-source timeline tools windows
1015
sepinf-inc / IPED
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
digital-forensics forensic recovery
Language:Java 943
whatfiles
spieglt / whatfiles
Log what files are accessed by any Linux process
digital-forensics filesystem-events linux-utilities
Language:C 939
AzureHunter
darkquasar / AzureHunter
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
azforensics azure azure-forensics azuresearcher cloud-forensics cybersecurity dfir digital-forensics incident-response powershellv5 threat-hunting threathunting unifiedauditlog
Language:PowerShell 769
Kuiper
DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
artifacts dfir digital-forensics incident-response parser security
Language:JavaScript 758
AvillaDaniel / AvillaForensics
Avilla Forensics 3.0
adb adb-commands android apktool devices digital-forensics downgrade downgrade-attack extrator forensic-analysis forensics forensics-tools instagram ios mobile mobile-forensics signal telegram whatsapp whatsapp-parser
Language:C# 685
ashemery / LinuxForensics
Everything related to Linux Forensics
dfir digital-forensics forensics investigations linux
Language:Shell 672
evild3ad / MemProcFS-Analyzer
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
dfir digital-forensics incident-response live-response memory-forensics memprocfs powershell
Language:PowerShell 485
dfirtrack / dfirtrack
DFIRTrack - The Incident Response Tracking Application
dfir digital-forensics incident-management incident-response incident-response-tooling
Language:Python 479
ivbeg / awesome-forensicstools
Awesome list of digital forensic tools
awesome awesome-list forensics forensic-analysis digital-forensics metadata investigative-journalism
477
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
analyzer cortex cyber-threat-intelligence dfir digital-forensics enrichment free free-software incident-response ioc json observable open-source python thehive
Language:Python 430
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
misp security-incidents iocs thehive cortex administration-guide analyzer rest api incident-response digital-forensics analyst dfir free free-software documentation open-source platform thehive-project
391
Linux-Incident-Response
vm32 / Linux-Incident-Response
practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response
digital-forensics digital-forensics-incident-response incident-response ir linux
Language:Shell 356
cyb3rmik3 / MDE-DFIR-Resources
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
curated-collections curated-list dfir digital-forensics digital-forensics-incident-response incident-response kql kusto kusto-query kusto-query-language live-response mde microsoft microsoft-defender-for-endpoint resources
348
catalyst
SecurityBrewery / catalyst
Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes
dfir digital-forensics incident-response soar
Language:Vue 323
digitalisx / awesome-memory-forensics
A curated list of awesome Memory Forensics for DFIR
awesome awesome-list digital-forensics digital-forensics-incident-response forensics incident-response malware malware-analysis malware-research memory memory-analysis
319
horus
6abd / horus
An OSINT / digital forensics tool built in Python
api crypto cryptocurrency cybersecurity decryption digital-forensics encryption forensics hacktoberfest investigation investigations location osint python requests security security-tools steganography tool tools
Language:Python 316
dfir-toolkit
dfir-dd / dfir-toolkit
CLI tools for forensic investigation of Windows artifacts
cli dfir digital-forensics digital-forensics-incident-response forensic-analysis forensics forensics-tools rust rust-lang
Language:Rust 300
RealityNet / kobackupdec
Huawei backup decryptor
python3 huawei android decryption digital-forensics
Language:Python 290
MK-Ware / Forensic-Tools
A collection of tools for forensic analysis
forensic-analysis python cookie extract-metadata parse exif-extractor metadata metadata-extraction forensics exif-data-extraction exif-metadata exif whatsapp firefox chrome skype facebook facebook-messenger html-table digital-forensics
Language:Python 273
forensicanalysis / artifactcollector
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
dfir digital-forensics forensicartifacts
Language:Go 264
windows-forensic-artifacts
Psmths / windows-forensic-artifacts
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
analysis artifacts dfir digital-forensics forensic-analysis forensicartifacts forensics forensics-investigations reference windows windows-11
249
evild3ad / Collect-MemoryDump
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
dfir digital-forensics incident-response live-response memory-acquisition memory-forensics powershell
Language:PowerShell 216
TheHive-Project / TheHive4py
Python API Client for TheHive
thehive incident-response digital-forensics free-software open-source dfir free api-client api python
Language:Python 213
c-aff4
Velocidex / c-aff4
An AFF4 C++ implementation.
forensics compression-library compression-formats digital-forensics
Language:C++ 187

digital-forensics

cugu / awesome-forensics

TheHive-Project / TheHive

Velocidex / velociraptor

simsong / tcpflow

stuxnet999 / MemLabs

mikeroyal / Digital-Forensics-Guide

TheHive-Project / Cortex

yampelo / beagle

emalderson / ThePhish

rezaduty / cybersecurity-career-path

dfir-iris / iris-web

mesquidar / ForensicsTools

sepinf-inc / IPED

spieglt / whatfiles

darkquasar / AzureHunter

DFIRKuiper / Kuiper

AvillaDaniel / AvillaForensics

ashemery / LinuxForensics

evild3ad / MemProcFS-Analyzer

dfirtrack / dfirtrack

ivbeg / awesome-forensicstools

TheHive-Project / Cortex-Analyzers

TheHive-Project / TheHiveDocs

vm32 / Linux-Incident-Response

cyb3rmik3 / MDE-DFIR-Resources

SecurityBrewery / catalyst

digitalisx / awesome-memory-forensics

6abd / horus

dfir-dd / dfir-toolkit

RealityNet / kobackupdec

MK-Ware / Forensic-Tools

forensicanalysis / artifactcollector

Psmths / windows-forensic-artifacts

evild3ad / Collect-MemoryDump

TheHive-Project / TheHive4py

Velocidex / c-aff4