Awesome-Mirrors/awesome-incident-response
1
0
Fork 0
mirror of https://github.com/meirwah/awesome-incident-response.git synced 2024-10-01 01:06:19 -04:00
Code Issues Packages Projects Releases Wiki Activity

Added PyaraScanner

Browse Source
This commit is contained in:
nogoodconfig 2018-05-03 15:30:01 +01:00
parent 7d2d1564d0
commit c3320ee0d3
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -154,6 +154,7 @@ A curated list of tools and resources for security incident response, aimed to h
* [Hostintel](https://github.com/keithjjones/hostintel) - Pull intelligence per host * [Hostintel](https://github.com/keithjjones/hostintel) - Pull intelligence per host
* [imagemounter](https://github.com/ralphje/imagemounter) - Command line utility and Python package to ease the (un)mounting of forensic disk images * [imagemounter](https://github.com/ralphje/imagemounter) - Command line utility and Python package to ease the (un)mounting of forensic disk images
* [Kansa](https://github.com/davehull/Kansa/) - Kansa is a modular incident response framework in Powershell * [Kansa](https://github.com/davehull/Kansa/) - Kansa is a modular incident response framework in Powershell
* [PyaraScanner](https://github.com/nogoodconfig/pyarascanner) - PyaraScanner is a very simple many-rules to many-files YARA scanning script for malware zoos and IR, written in Python
* [rastrea2r](https://github.com/aboutsecurity/rastrea2r) - allows one to scan disks and memory for IOCs using YARA on Windows, Linux and OS X * [rastrea2r](https://github.com/aboutsecurity/rastrea2r) - allows one to scan disks and memory for IOCs using YARA on Windows, Linux and OS X
* [RaQet](https://raqet.github.io/) - RaQet is an unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system * [RaQet](https://raqet.github.io/) - RaQet is an unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system
* [Stalk](https://www.percona.com/doc/percona-toolkit/2.2/pt-stalk.html) - Collect forensic data about MySQL when problems occur * [Stalk](https://www.percona.com/doc/percona-toolkit/2.2/pt-stalk.html) - Collect forensic data about MySQL when problems occur