Incident Response Documentation tool for tracking findings and tasks.
#forensics tools
47 results
Collection of scripts and resources for DevSecOps, Security Automation and Automated Incident Response Remediation.
A reliable end-to-end DFIR solution for boosting cyber incident response and forensics capacity.
A robust endpoint security solution that offers data security, network security, and advanced threat prevention, all managed from a single console to protect your devices and data.
A framework for creating and executing pynids-based decoders and detectors of APT tradecraft
A modified version of GNU dd with added features like hashing and fast disk wiping.
Andrew Case's personal page for research, software projects, and speaking events
A community-sourced repository of digital forensic artifacts in YAML format.
Forensics tool for exploring offline Docker filesystems.
Open source tool for generating YARA rules about installed software from a running OS.
Anti-forensics tool for Red Teamers to erase footprints and test incident response capabilities.
A collection of tools for extracting and analyzing information from .git repositories
Incident response framework focused on remote live forensics
Windows event log fast forensics timeline generator and threat hunting tool.
Hindsight is a free tool for analyzing web artifacts from Google Chrome/Chromium browsers and presenting the data in a timeline for forensic analysis.
Hoarder is a tool to collect and parse windows artifacts.
HoneyDrive is the premier honeypot Linux distro with over 10 pre-installed honeypot software packages and numerous analysis tools.
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various secu…
iOS Mobile Backup Xtractor tool for extracting iOS backups.
Impost is a powerful network security auditing tool with honey pot and packet sniffer capabilities.
An open source digital forensic tool for processing and analyzing digital evidence with high performance and multiplatform support.
Create checkpoint snapshots of the state of running pods for later off-line analysis.
Easy-to-use live forensics toolbox for Linux endpoints with various capabilities such as process inspection, memory analysis, and YARA scanning.
A Security Information and Event Management (SIEM) system with a focus on security and minimalism.
Load more tools
Showing 24 of 47