digital-forensics

There are 72 repositories under digital-forensics topic.

cugu / awesome-forensics
A curated list of awesome forensic analysis tools and resources
computer-forensics dfir digital-forensics forensic-analysis free open-source
3594
TheHive
TheHive-Project / TheHive
TheHive: a Scalable, Open Source and Free Security Incident Response Platform
misp security-incidents analyzer iocs thehive digital-forensics incident-response rest api scala investigations dfir free open-source platform cortex agplv3 orchestration incident-management incident-response-tooling
Language:Scala 3227
velociraptor
Velocidex / velociraptor
Digging Deeper....
incident-response forensics-investigations inventory-management endpoint-security endpoint-protection endpoint-discovery digital-forensics
Language:Go 2678
simsong / tcpflow
TCP/IP packet demultiplexer. Download from:
digital-forensics forensics tcp-protocol tcpip
Language:C++ 1645
MemLabs
stuxnet999 / MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
ctf ctf-challenges cybersecurity dfir digital-forensics forensics memory-forensics security windows
Language:Shell 1556
Digital-Forensics-Guide
mikeroyal / Digital-Forensics-Guide
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
digitalforensics digitalforensicreadiness forensics security forensics-tools digital-forensics threat-intelligence intrusion-detection mitre-attack detection-engineering network-security offensive-security cyber-security port-scanning siem alerting forensic-analysis forensics-investigations osint dfir
Language:Python 1358
beagle
yampelo / beagle
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
dfir digital-forensics forensic-analysis graph incident-response security threat-hunting
Language:Python 1259
Cortex
TheHive-Project / Cortex
Cortex: a Powerful Observable Analysis and Active Response Engine
response dfir analysis analyzer thehive engine scala python rest api security-incidents digital-forensics iocs observable free free-software open-source incident-response cyber-threat-intelligence cortex
Language:Scala 1252
ThePhish
emalderson / ThePhish
ThePhish: an automated phishing email analysis tool
email detection malware phishing cybersecurity misp thehive thehive4 thehive4py indicators-of-compromise cyberdefense phishing-detection python incident-response free digital-forensics threat-intelligence webapp attack script
Language:Python 1046
dfir-iris / iris-web
Collaborative Incident Response platform
forensic incident-response csirt-tooling python digital-forensics digital-forensics-incident-response forensic-analysis forensic-tools
Language:JavaScript 940
whatfiles
spieglt / whatfiles
Log what files are accessed by any Linux process
digital-forensics filesystem-events linux-utilities
Language:C 936
rezaduty / cybersecurity-career-path
Cybersecurity Career Path
cyber-threat-analyst cybersecurity-career-path digital-forensics pentesting roadmap
927
ForensicsTools
mesquidar / ForensicsTools
A list of free and open forensics analysis tools and other resources
forensics digital-forensics computer-fore forensic-analysis forensics-investigations forensic-tools tools free open-source awesome-list metada metadata image-analysis timeline network windows macos linux
894
sepinf-inc / IPED
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
forensic recovery digital-forensics
Language:Java 844
AzureHunter
darkquasar / AzureHunter
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
azforensics azure azure-forensics azuresearcher cloud-forensics cybersecurity dfir digital-forensics incident-response powershellv5 threat-hunting threathunting unifiedauditlog
Language:PowerShell 764
Kuiper
DFIRKuiper / Kuiper
Digital Forensics Investigation Platform
dfir security incident-response artifacts parser digital-forensics
Language:JavaScript 720
ashemery / LinuxForensics
Everything related to Linux Forensics
dfir digital-forensics forensics investigations linux
Language:Shell 663
AvillaDaniel / AvillaForensics
Avilla Forensics 3.0
mobile forensics whatsapp telegram signal adb android adb-commands ios apktool forensics-tools downgrade downgrade-attack forensic-analysis devices instagram extrator mobile-forensics digital-forensics whatsapp-parser
Language:C# 610
dfirtrack / dfirtrack
DFIRTrack - The Incident Response Tracking Application
dfir digital-forensics incident-management incident-response incident-response-tooling
Language:Python 464
ivbeg / awesome-forensicstools
Awesome list of digital forensic tools
awesome awesome-list digital-forensics forensic-analysis forensics investigative-journalism metadata
450
Cortex-Analyzers
TheHive-Project / Cortex-Analyzers
Cortex Analyzers Repository
thehive analyzer cortex free free-software open-source observable ioc json incident-response digital-forensics dfir cyber-threat-intelligence python enrichment
Language:Python 415
evild3ad / MemProcFS-Analyzer
MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR
dfir digital-forensics incident-response live-response memory-forensics memprocfs powershell
Language:PowerShell 403
TheHiveDocs
TheHive-Project / TheHiveDocs
Documentation of TheHive
misp security-incidents iocs thehive cortex administration-guide analyzer rest api incident-response digital-forensics analyst dfir free free-software documentation open-source platform thehive-project
390
Linux-Incident-Response
vm32 / Linux-Incident-Response
practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response
digital-forensics digital-forensics-incident-response incident-response ir linux
Language:Shell 307
cyb3rmik3 / MDE-DFIR-Resources
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
curated-collections curated-list dfir digital-forensics digital-forensics-incident-response incident-response kql kusto kusto-query kusto-query-language live-response mde microsoft microsoft-defender-for-endpoint resources
288
RealityNet / kobackupdec
Huawei backup decryptor
android decryption digital-forensics huawei python3
Language:Python 280
catalyst
SecurityBrewery / catalyst
Catalyst is an open source SOAR and ticket system that helps to automate alert handling and incident response processes
soar incident-response digital-forensics dfir
Language:Go 271
MK-Ware / Forensic-Tools
A collection of tools for forensic analysis
forensic-analysis python cookie extract-metadata parse exif-extractor metadata metadata-extraction forensics exif-data-extraction exif-metadata exif whatsapp firefox chrome skype facebook facebook-messenger html-table digital-forensics
Language:Python 269
digitalisx / awesome-memory-forensics
A curated list of awesome Memory Forensics for DFIR
awesome awesome-list digital-forensics digital-forensics-incident-response forensics incident-response malware malware-analysis malware-research memory memory-analysis
254
dfir-toolkit
dfir-dd / dfir-toolkit
CLI tools for forensic investigation of Windows artifacts
cli dfir digital-forensics digital-forensics-incident-response forensic-analysis forensics forensics-tools rust rust-lang
Language:Rust 238
forensicanalysis / artifactcollector
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
dfir digital-forensics forensicartifacts
Language:Go 238
evild3ad / Collect-MemoryDump
Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
powershell dfir digital-forensics incident-response live-response memory-acquisition memory-forensics
Language:PowerShell 211
TheHive-Project / TheHive4py
Python API Client for TheHive
thehive incident-response digital-forensics free-software open-source dfir free api-client api python
Language:Python 208
windows-forensic-artifacts
Psmths / windows-forensic-artifacts
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
analysis artifacts dfir digital-forensics forensic-analysis forensicartifacts forensics forensics-investigations reference windows windows-11
194
horus
6abd / horus
An OSINT / digital forensics tool built in Python (formerly 'Sentinel')
api crypto cryptocurrency cybersecurity decryption digital-forensics encryption forensics investigation investigations location osint python python3 requests security security-tools steganography tool tools
Language:Python 191
c-aff4
Velocidex / c-aff4
An AFF4 C++ implementation.
compression-formats compression-library digital-forensics forensics
Language:C++ 181

digital-forensics

cugu / awesome-forensics

TheHive-Project / TheHive

Velocidex / velociraptor

simsong / tcpflow

stuxnet999 / MemLabs

mikeroyal / Digital-Forensics-Guide

yampelo / beagle

TheHive-Project / Cortex

emalderson / ThePhish

dfir-iris / iris-web

spieglt / whatfiles

rezaduty / cybersecurity-career-path

mesquidar / ForensicsTools

sepinf-inc / IPED

darkquasar / AzureHunter

DFIRKuiper / Kuiper

ashemery / LinuxForensics

AvillaDaniel / AvillaForensics

dfirtrack / dfirtrack

ivbeg / awesome-forensicstools

TheHive-Project / Cortex-Analyzers

evild3ad / MemProcFS-Analyzer

TheHive-Project / TheHiveDocs

vm32 / Linux-Incident-Response

cyb3rmik3 / MDE-DFIR-Resources

RealityNet / kobackupdec

SecurityBrewery / catalyst

MK-Ware / Forensic-Tools

digitalisx / awesome-memory-forensics

dfir-dd / dfir-toolkit

forensicanalysis / artifactcollector

evild3ad / Collect-MemoryDump

TheHive-Project / TheHive4py

Psmths / windows-forensic-artifacts

6abd / horus

Velocidex / c-aff4