1074 matches found
bfac
BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...
ThreatKB
NOTE: THIS REPO IS IN AN ALPHA STATE ThreatKB is a knowledge base workflow management dashboard for YARA rules and C2 artifacts. Rules are categorized and used to denote intent, severity, and confidence in accumulated artifacts. To start using ThreatKB, check out our wiki. Installing by Docker is...
Incident-Response-Powershell
Powershell Digital Forensics & Incident Response This repository provides PowerShell-based Incident Response scripts. DFIR Script The DFIR-Script.ps1 script collects forensic artifacts on Windows devices. Key features include: Collecting over 25 potential indicators of compromise. CSV-based expor...
DetectRaptor
DetectRaptor A repository to share publicly available bulk Velociraptor detection content in an easy to consume way. Simply take the release VQL zip and import it into Velociraptor. This is made easy via the Velociraptor artifact exchange: Server.Import.DetectRaptor 1. Import Velociraptor Artifac...
volatility3
Volatility 3: El framework de extracción de memoria volátil Volatility es el framework más utilizado en el mundo para extraer artefactos digitales de muestras de memoria volátil RAM. Las técnicas de extracción se realizan de forma completamente independiente del sistema investigado, pero ofrecen...
irflow-timeline
IRFlow Timeline Análisis forense de líneas de tiempo nativo para macOS. Importa, busca e investiga artefactos EVTX, CSV, XLSX, Plaso, $MFT, $J y de asistentes de IA locales — con AI Secret Hunt y los análisis que los profesionales de DFIR realmente necesitan. Construido sobre Electron + SQLite pa...
hindsight
Hindsight Análisis forense del historial de Internet para Google Chrome/Chromium y Mozilla Firefox Hindsight es una herramienta gratuita para analizar artefactos web. Comenzó con el historial de navegación del navegador web Google Chrome, se ha expandido para soportar otras aplicaciones basadas e...
avml
AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...
macos-collector
macos-collector macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR macos-collector.sh is a Shell script utilized to collect macOS Forensic Artifacts from a compromised macOS endpoint using primarily Aftermath by Jamf Threat Labs. Download Download the latest version of...
dfirtriage
dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...
slsa
SLSA "salsa" es Niveles de cadena de suministro para artefactos de software SLSA pronunciado "salsa" es un marco de seguridad desde el origen hasta el servicio, que brinda a cualquier persona que trabaje con software un lenguaje común para aumentar los niveles de seguridad del software y la...
multiplier
Multiplier finds more bugs faster Multiplier provides precise and comprehensive code understanding capabilities. It does so by saving build artifacts into a database, and then making them persistently accessible using a C++ or Python API. Multiplier emphasizes the ability to uniquely identify all...
awesome-soc-analyst
awesome-soc-analyst Acabamos de recopilar recursos útiles para analistas de SOC y candidatos a analista de SOC. Este repositorio es mantenido por LetsDefend. Siéntete libre de añadir nuevos recursos aquí. Tabla de Contenidos Libros Análisis de Malware Laboratorios de Práctica Análisis de Phishing...
paranoid_crypto
Project Paranoid Overview Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers. This library contains implementations and optimizations of existing work found in the literature. The existing work show...
tcpflow
TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...
ics-forensics-tools
ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...
plugxdecoder
plugxdecoder Basic Python script which Decodes PlugX traffic and encrypted/compressed artifacts. Accepting pull requests from those who wish to contribute. Currently requires: CTypes with ntdll, dpkt http://code.google.com/p/dpkt Tested with Python 2.7, on Windows. Long-term goal is to make a pur...
iocextract
iocextract Indicador de Compromiso IOC para algunos de los artefactos más comúnmente ingeridos. Índice Resumen El problema Nuestra solución Ejemplo de uso Instalación Uso Biblioteca Interfaz de línea de comandos Información útil Preguntas frecuentes Más detalles Regex personalizado Proyectos...
artifacts-kit
. . / || |/ / | | | ||/ | \ \ \ \ \ / \ | |/ / \ / | | /| | | || | / \ | | | | | | ||| / / / / Kit Generador de Artefactos de Memoria Maliciosa v1.0 | Forrest Orr | 2020 REQUERIDO --alloc-type dll-map-hollow|dll-load-hollow|txf-dll-map-hollow|private|mapped OPCIONAL --payload-file...