Live-Forensicator

🛡️ Forensicator 🛡️ Кроссплатформенный набор инструментов для реагирования на инциденты и live-криминалистики Windows PowerShell | Linux Bash | macOS Shell Создан для быстрых, структурированных и практически применимых криминалистических расследований. 🤔 О проекте Forensicator — это...

grr

GRR Rapid Response — это платформа реагирования на инциденты, ориентированная на удаленную живую криминалистику. GRR — это клиент на Python агент, который устанавливается на целевые системы, и серверная инфраструктура на Python, которая может управлять клиентами и взаимодействовать с ними...

Fastir_Collector

FastIR Collector 라이브 포렌식 수집 방식이 변경되어 FastIR Collector는 더 이상 유지 관리되지 않습니다. 대신 새로운FastIR Artifacts 컬렉터를 사용하는 것을 권장합니다. 개념 이 도구는 라이브 Windows 시스템에서 다양한 아티팩트를 수집하여 결과를 csv 또는 json 파일로 기록합니다. 이러한 아티팩트 분석을 통해 초기 침해 징후를 감지할 수 있습니다. 다운로드 바이너리는 이 프로젝트의 릴리스 페이지에서 찾을 수 있습니다. 요구 사항 pywin32 python WMI python...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

linux-explorer

このプロジェクトはメンテナンスされなくなりました！ Linux Expl0rer Python & Flaskで書かれたLinuxエンドポイント向けの使いやすいライブフォレンジックツールボックス。 機能 ps 完全なプロセスリストを表示 プロセスのメモリマップを調査し、メモリ文字列を簡単に取得 ワンクリックでプロセスメモリをダンプ 公開サービスでハッシュを自動検索 VirusTotal Intezer Analyze AlienVault OTX MalShare users ユーザーリスト find 名前/正規表現で不審なファイルを検索 netstat Whois logs syslo...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

Live-Forensicator - Powershell Script To Aid Incidence Response And Live Forensics

Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigators and Incidence responders in carrying out a quick live forensic investigation. It achieves this by gathering different system information for further review for anomalous behaviour or unexpected data...

Digital Forensics Toolkit: DEFT

DEFT acronym for Digital Evidence & Forensics Toolkit is a distribution made for Computer Forensics, with the purpose of running live on systems without tampering or corrupting devices hard disks, pendrives, etc… connected to the PC where the boot process takes place. The system is based on GNU...