triage

alexandreborges/malwoverview

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest, VxExchange and IPInfo, and it is also able to scan Android devices against VT.

tclahr/uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

binref/refinery

High Octane Triage Analysis

EricZimmerman/KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

TonyPhipps/SIEM

SIEM Tactics, Techiques, and Procedures

google/triage-party

🎉 Triage Party: massively multi-player GitHub triage 🎉

TonyPhipps/Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

rc0r/afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

ispras/casr

Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.

WithSecureLabs/LinuxCatScale

Incident Response collection and processing scripts with automated reporting scripts

dssg/triage

General Purpose Risk Modeling and Prediction Toolkit for Policy and Social Good Problems

Relequestual/sensible-github-labels

Github labels for teams that like workflows and structure

blueteam0ps/AllthingsTimesketch

This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.

kewisch/quickmove-extension

Quick Folder Move Add-on for Thunderbird

nov3mb3r/trident

A PowerShell incident response script for quick triage

jhuapl-bio/taxtriage

TaxTriage is a Nextflow workflow designed to agnostically identify and classify microbial organisms within short- or long-read metagenomic NGS data. This flexible tool was developed with various use-cases of mNGS in mind.

ahoog42/ios-triage

incident response tool for iOS devices

ant4g0nist/crashmon

crashmon - A LLDB Based replacement for CrashWrangler

hrbrmstr/cisa-known-exploited-vulns

Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list

op7ic/unix_collector

unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

WithSecureLabs/macOSTriageCollectionScript

A triage data collection script for macOS

dhondta/AppmemDumper

Forensics triage tool relying on Volatility and Foremost

archcloudlabs/r2elk

Radare2 Metadata Extraction to Elasticsearch

godotengine/godot-prs-by-file

godotengine/godot-team-reports

Browse Godot PR backlog for each maintenance team

CH-CLARK/WalletSleuth

Cryptocurrency Triage Tool - Identify multiple cryptocurrency addresses and transactions from various wallet applications!

novosga/triage-app

NovoSGA Triage Client

abaghinyan/Aralez

Aralez is a triage tool for Windows and Linux that automates the collection of system information, network/process data, and files.

WithSecureLabs/FLAIR

F-Secure Lightweight Acqusition for Incident Response (FLAIR)

keyamedical/covid-19

Keya Medical COVID-19 detection service

dwmetz/Presentations

DFIR Presentations

OMirzaei/TriFlow

TriFlow: Triaging Android Applications using Speculative Information Flows

hashlookup/hashlookup-gui

Provides a multi-platform Graphical User Interface for hashlookup

openebs-archive/spdk-sys

Rust bindings for SPDK

maxspl/OSIR

Orchestration Software for Incident Response