From 4c6189b2f087cc4e91cdf31df6a1c930d9be345c Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Sat, 28 Nov 2015 14:29:38 +0100 Subject: [PATCH] IOC Finder added --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index e731fbc..25e7fe6 100644 --- a/README.md +++ b/README.md @@ -73,6 +73,7 @@ A curated list of tools and resources for security incident response, aimed to h * [DumpIt](http://www.moonsols.com/resources/) - DumpIt is used to generate a physical memory dump of Windows machines. It works with both x86 (32-bits) and x64 (64-bits) machines. * [AChoir](https://github.com/OMENScan/AChoir) - Achoir is a framework/scripting tool to standardize and simplify the process of scripting live acquisition utilities for Windows. * [RegRipper](https://code.google.com/p/regripper/wiki/RegRipper) - Regripper is an open source tool, written in Perl, for extracting/parsing information (keys, values, data) from the Registry and presenting it for analysis. +* [IOC Finder](https://www.fireeye.com/services/freeware/ioc-finder.html) - IOC Finder is a free tool from Mandiant for collecting host system data and reporting the presence of Indicators of Compromise (IOCs). Supports for Windows only. ### OSX Evidence Collection * [OSX Auditor](https://github.com/jipegit/OSXAuditor) - OSX Auditor is a free Mac OS X computer forensics tool