Movatterモバイル変換

Skip to content

#

dfir-automation

Here are 85 public repositories matching this topic...

Language:All

Filter by language

All85 Python47 Shell8 PowerShell6 Batchfile3 HCL3 Perl3 Go2 HTML2 JavaScript2 Jupyter Notebook2

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

clong /DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

ansible vagrant packer powershell terraform detection dfir vagrantfile sysmon osquery information-security lab-environment detectionlab dfir-automation

UpdatedJul 6, 2024
HTML

MasterParser

securityjoes /MasterParser

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

security automation tools powershell reporting incident-response dfir infosec cyber soc cyber-security ir mdr digital-forensic dfir-automation

UpdatedAug 17, 2025
PowerShell

iknowjason /PurpleCloud

A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog:https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4

azure dfir siem pentest purpleteam azure-lab dfir-automation

UpdatedMar 21, 2025
Python

cado-security /varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

aws security aws-lambda forensics dfir hacktoberfest memory-forensics cloud-security aws-fargate dfir-automation docker-forensics aws-forensics eks-forensics fargate-forensics

UpdatedNov 18, 2024
Python

Correia-jpv /fucking-awesome-incident-response

A curated list of tools for incident response. With repository stars⭐ and forks🍴

security list awesome incident-response dfir awesome-list digital-forensics incident incident-management incident-reports incidents incident-response-tooling dfir-automation digitalforensics

UpdatedDec 16, 2025

jurelou /epagneul

Graph Visualization for windows event logs

security forensics threat-hunting hunting blueteam security-tools evtx dfir-automation forensics-tools

UpdatedJan 15, 2025
Python

iknowjason /BlueCloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

dfir pentesting blue-team purpleteam cyber-range cyberrange dfir-automation edr-testing

UpdatedNov 2, 2022
HTML

cado-security /rip_raw

Rip Raw is a small tool to analyse the memory of compromised Linux systems.

security forensics dfir forensic-analysis memory-forensics dfir-automation

UpdatedJan 31, 2022
Python

hashlookup /hashlookup-forensic-analyser

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service -https://circl.lu/services/hashlookup/

bloom-filter dfir nsrl forensic-analysis forensics-investigations dfir-automation nsrllookup hashlookup

UpdatedSep 24, 2023
Python

adulau /hashlookup-server

Fast lookup server for NSRL and other hash database used in digital forensic

dfir infosec nsrl information-security dfir-automation nsrllookup hashlookup

UpdatedJun 16, 2022
Python

op7ic /unix_collector

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

linux freebsd security unix openbsd script esxi incident-response posix forensics dfir solaris triage computer-forensics blueteam dfir-automation live-response forensics-tools

UpdatedJun 10, 2025
Shell

Digital-Defense-Institute /openrelik-pipeline

Pipeline that allows sending forensic artifacts to OpenRelik for automatic processing

security incident-response dfir secops infosec security-automation plaso timesketch log2timeline velociraptor dfir-automation hayabusa openrelik

UpdatedNov 24, 2025
Python

ionsec /maes-platform

MAES: M365 Analyzer & Extractor Suite Po

security-assessment dfir-automation 365-microsoft-office

UpdatedDec 2, 2025
JavaScript

SimpleImager

QXJ6YW4 /SimpleImager

Simple Imager has been created for performing live acquisition of Windows based systems in a forensically sound manner

forensics dfir digital-forensics blueteam memory-dump memory-dumper forensics-101 dfir-automation digital-forensics-incident-response ir-diag forensics-tools forensic-imager

UpdatedOct 28, 2025
Batchfile

atola-technology /iscsi-targets

Automatically create iSCSI targets for all drives except for a boot device

dfir iscsi-target iscsi dfir-automation forensic-tools forensic-imager dfir-tools forensic-software

UpdatedMay 23, 2025
Python

iknowjason /Velociraptor_Azure

A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.

dfir purpleteam dfir-automation

UpdatedApr 16, 2021
HCL

brootware /flarevm-up

Easy automated vagrant provisioning of Windows 10 with flarevm tools installed for Digital Forensics and Malware Analysis Lab.

vagrant virtualbox reverse-engineering windows-10 ctf malware-analysis digital-forensics ctf-tools blueteaming dfir-automation forensics-tools

UpdatedMay 29, 2022
HCL

RealityNet /McAFuse

Toolset to analyze disks encrypted with McAFee FDE technology

master-thesis incident-response reverse-engineering dfir fuse-filesystem mcafee fde dfir-automation

UpdatedMar 11, 2021
Python

idiom /activemime-format

ActiveMime File Format Documentation

dfir malware-analysis dfir-automation

UpdatedJun 28, 2021
Python

jupyterj0nes /sabonis

Sabonis, a Digital Forensics and Incident Response pivoting tool

incident-response dfir digital-forensics blue-team dfir-automation

UpdatedMar 3, 2022
Python

Improve this page

Add a description, image, and links to thedfir-automation topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with thedfir-automation topic, visit your repo's landing page and select "manage topics."

[8]ページ先頭

©2009-2025 Movatter.jp