Chip-DFIR

Chip-DFIR's Stars

• massgravel/Microsoft-Activation-Scripts

  Open-source Windows and Office activator featuring HWID, Ohook, KMS38, and Online KMS activation methods, along with advanced troubleshooting.

  Language:Batchfile101k9.9k

• cmu-sei/GHOSTS

  GHOSTS is a realistic user simulation framework for cyber experimentation, simulation, training, and exercise

  Language:C#50567

• lorentzenman/sheepl

  Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments

  Language:Python39255

• Velocidex/velociraptor

  Digging Deeper....

  Language:Go3k488

• stuxnet999/MemLabs

  Educational, CTF-styled labs for individuals interested in Memory Forensics

  Language:Shell1.6k201

• digitalisx/awesome-memory-forensics

  A curated list of awesome Memory Forensics for DFIR

  33347

• volatilityfoundation/volatility3

  Volatility 3.0 development

  Language:Python2.7k453

• mdegrazia/KAPE_Tools

  Tools and Binaries to use with KAPE

  11

• keydet89/Tools

  Tools from WFA 4/e, timeline tools, etc.

  Language:Perl13229

• simsong/bulk_extractor

  This is the development tree. Production downloads are at:

  Language:C++1.1k187

• daveherrald/SA_plaso-app-for-splunk

  Language:JavaScript153

• gleeda/memtriage

  Allows you to quickly query a Windows machine for RAM artifacts

  Language:Python21822

• volatilityfoundation/community

  Volatility plugins developed and maintained by the community

  Language:Python341142

• woanware/RegRipperRunner

  Language:C#44

• google/grr

  GRR Rapid Response: remote live forensics for incident response

  Language:Python4.8k763

• meirwah/awesome-incident-response

  A curated list of tools for incident response

  7.6k1.5k

• EnCaseIntegratedToolkit/EITT

  a GUI Interface for DFIR Open Source Tools

  101

• mandiant/Reversing

  11030

• woanware/usbdeviceforensics

  Python script for extracting USB information from Windows registry hives

  Language:Python12425

• dlcowen/dfirwizard

  Example programs used in the automating DFIR series

  Language:Python645

• EricZimmerman/RegistryExplorerBookmarks

  Registry Explorer bookmark definitions

  4114

• USArmyResearchLab/Dshell

  Dshell is a network forensic analysis framework.

  Language:Python5.5k1.1k

• log2timeline/plaso

  Super timeline all the things

  Language:Python1.7k347

• google/timesketch

  Collaborative forensic timeline analysis

  Language:Python2.6k590

• kevthehermit/Scripts

  Just a collection of scripts

  Language:Python4025