live-response

There are 1 repository under live-response topic.

• tclahr / uac

  UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

  incident-responseforensicscomputer-forensicstriagelinuxaixsolarismacosopenbsdfreebsdnetbsddfirnetscaleresxilive-responseshellsecurityterminalscriptcollector
  Language:Shell 706

• evild3ad / MemProcFS-Analyzer

  MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

  powershellincident-responsedfirdigital-forensicsmemprocfsmemory-forensicslive-response
  Language:PowerShell 431

• cyb3rmik3 / MDE-DFIR-Resources

  A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

  curated-collectionscurated-listdfirdigital-forensicsdigital-forensics-incident-responseincident-responsekqlkustokusto-querykusto-query-languagelive-responsemdemicrosoftmicrosoft-defender-for-endpointresources
  335

• evild3ad / Collect-MemoryDump

  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

  powershelldfirdigital-forensicsincident-responselive-responsememory-acquisitionmemory-forensics
  Language:PowerShell 212

• lawndoc / mediator

  An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

  reverse-shellend-to-end-encryptionsecurity-toolslive-responsepentestingpentesting-toolssocket-programmingpython-scriptreverse-shellshandlerspythonpython3python-3red-teamred-teamingincident-response-toolingincident-responsepluginsplugin-system
  Language:Python 97

• op7ic / unix_collector

  unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

  unixblueteamforensicsfreebsdlinuxopenbsdposixscriptcomputer-forensicsdfirdfir-automationlive-responsesolarisincident-responseforensics-toolssecuritytriageesxi
  Language:Shell 29

• 21gramaz / Powershell-SIR

  This is a Live Response script to help incident responders to acquire data, contain and recover.

  incident-responselive-responsepowershell-scriptsecurity
  Language:PowerShell 6

• LazyAlpaka / ifrit

  Incident Forensic Response In Terminal script for linux

  dfirforensicincident-responselinuxlive-responsescriptshellterminaltriagebest-practicesinformation-gatheringinformation-securitylinux-securitycollection
  Language:Shell 6

• iidx / PSListCopy

  File and file meta information collect using PowerShell in Live Response environment.

  forensicslive-responsedfirpowershell
  Language:Python 3

• 0xThiebaut / Zipit

  A Firefox extension to encrypt files downloaded through Microsoft 365 Defender's Live Response Sessions.

  live-responsemicrosoft-365-securityinfectedzipmalware
  Language:TypeScript

• iidx / IIS-AppHostParser

  Parse IIS applicationHost.config to generate CSV file.

  forensicslive-responsedfiriis
  Language:Python