Statistics for topic dfir
RepositoryStats tracks 518,986 Github repositories, of these 171 are tagged with the dfir topic. The most common primary language for repositories using this topic is Python (59). Other languages include: PowerShell (24)
Stargazers over time for topic dfir
Most starred repositories for topic dfir (view more)
Trending repositories for topic dfir (view more)
A curated list of tools for incident response
A curated list of awesome forensic analysis tools and resources
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
A curated list of tools for incident response. With repository stars⭐ and forks🍴
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
A curated list of tools for incident response
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A curated list of awesome forensic analysis tools and resources
yara detection rules for hunting with the threathunting-keywords project
A curated list of tools for incident response. With repository stars⭐ and forks🍴
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts
A curated list of tools for incident response
A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
yara detection rules for hunting with the threathunting-keywords project
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.
A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you come from where did you go) in Security Incidents and Threat Hunts
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
A curated list of tools for incident response
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
A curated list of awesome forensic analysis tools and resources
Awesome list of keywords and artifacts for Threat Hunting sessions
Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!
KQL Queries. Microsoft 365 Defender, Microsoft Sentinel
A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.