Awesome-Mirrors/awesome-incident-response
1
0
Fork 0
mirror of https://github.com/meirwah/awesome-incident-response.git synced 2024-07-01 00:31:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #119 from nogoodconfig/master

Browse Source 
Added PyaraScanner
This commit is contained in:
Meir Wahnon 2018-09-02 05:58:33 -07:00 committed by GitHub
commit 42c943baef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -169,6 +169,7 @@ A curated list of tools and resources for security incident response, aimed to h
* [Hostintel](https://github.com/keithjjones/hostintel) - Pull intelligence per host
* [imagemounter](https://github.com/ralphje/imagemounter) - Command line utility and Python package to ease the (un)mounting of forensic disk images
* [Kansa](https://github.com/davehull/Kansa/) - Kansa is a modular incident response framework in Powershell
* [PyaraScanner](https://github.com/nogoodconfig/pyarascanner) - PyaraScanner is a very simple multithreaded many-rules to many-files YARA scanning Python script for malware zoos and IR
* [rastrea2r](https://github.com/aboutsecurity/rastrea2r) - allows one to scan disks and memory for IOCs using YARA on Windows, Linux and OS X
* [RaQet](https://raqet.github.io/) - RaQet is an unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system
* [Stalk](https://www.percona.com/doc/percona-toolkit/2.2/pt-stalk.html) - Collect forensic data about MySQL when problems occur