From 662dbd99047d5a3292f9a2ee453ab5f89a180d77 Mon Sep 17 00:00:00 2001 From: "Keith J. Jones" Date: Wed, 31 Aug 2016 10:37:53 -0400 Subject: [PATCH] Added two keithjjones tools. --- README.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/README.md b/README.md index c3f4f41..86c9277 100644 --- a/README.md +++ b/README.md @@ -133,6 +133,9 @@ A curated list of tools and resources for security incident response, aimed to h * [Stenographer](https://github.com/google/stenographer) - Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those packets. It stores as much history as it possible, managing disk usage, and deleting when disk limits are hit. It's ideal for capturing the traffic just before and during an incident, without the need explicit need to store all of the network traffic * [traceroute-circl](https://github.com/CIRCL/traceroute-circl) - traceroute-circl is an extended traceroute to support the activities of CSIRT (or CERT) operators. Usually CSIRT team have to handle incidents based on IP addresses received. Created by Computer Emergency Responce Center Luxembourg * [X-Ray 2.0](https://www.raymond.cc/blog/xray/) - A Windows utility (poorly maintained or no longer maintained) to submit virus samples to AV vendors +* [hostintel](https://github.com/keithjjones/hostintel) - Pull intelligence per host +* [fileintel](https://github.com/keithjjones/fileintel) - Pull intelligence per file hash + ### Playbooks