From 7dcf68cf530b1460a145a1df6f1f28f15c841a94 Mon Sep 17 00:00:00 2001 From: Meir Wahnon Date: Fri, 13 Nov 2015 23:13:59 +0200 Subject: [PATCH] add All in one Tools --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 5864b55..d2f05bd 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,7 @@ A curated list of tools for incident response - [Memory Analysis Tools](#memory-analysis-tools) - [Memory Imaging Tools](#memory-imaging-tools) - [Process Dump Tools](#process-dump-tools) +- [All in one tools](#all-in-one-tools) ## IR tools Collection @@ -32,3 +33,9 @@ A curated list of tools for incident response ### Process Dump Tools * [PMDump](http://ntsecurity.nu/toolbox/pmdump/) - PMDump is a tool that lets you dump the memory contents of a process to a file without stopping the process * [Microsoft User Mode Process Dumper](http://www.microsoft.com/en-us/download/details.aspx?id=4060) - The User Mode Process Dumper (userdump) dumps any running Win32 processes memory image on the fly + +### All in one Tools +* [X-Ways Forensics](http://www.x-ways.net/forensics/) - X-Ways is a forensics tool for Disk cloning and imaging. It can be used to find deleted files and disk analysis +* [The Sleuth Kit & Autopsy](http://www.sleuthkit.org) - The Sleuth Kit is a Unix and Windows based tool which helps in forensic analysis of computers. It comes with various tools which helps in digital forensics. These tools help in analyzing disk images, performing in-depth analysis of file systems, and various other things +* [Open Computer Forensics Architecture](http://sourceforge.net/projects/ocfa/) - Open Computer Forensics Architecture (OCFA) is another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data +* [Digital Forensics Framework](http://www.arxsys.fr/discover/) - DFF is an Open Source computer forensics platform built on top of a dedicated Application Programming Interface (API). DFF proposes an alternative to the aging digital forensics solutions used today. Designed for simple use and automation, the DFF interface guides the user through the main steps of a digital investigation so it can be used by both professional and non-expert to quickly and easily conduct a digital investigations and perform incident response