Commit Graph

315 Commits

Author SHA1 Message Date
Meir Wahnon
d147e6286d Merge pull request #20 from hslatman/hs_memoryze
Memoryze by Mandiant
2015-11-26 10:35:16 +02:00
Herman Slatman
d7df2064ac Memoryze for Mac 2015-11-26 09:32:30 +01:00
Herman Slatman
bc50301d82 Memoryze added 2015-11-26 09:32:04 +01:00
Meir Wahnon
4e5377ae63 Merge pull request #19 from mikesxrs/Adding-multiple-sections
Adding content to Win forensics and other tools; Adding sections for OSX forensics,Sandboxing/reversing and Books
2015-11-26 09:05:31 +02:00
Mike Worth
9d4088fbb4 Update README.md 2015-11-25 18:01:35 -05:00
mikesxrs
0cdb45e377 Update README.md 2015-11-25 17:16:00 -05:00
mikesxrs
d6a8e61bd8 Adding multiple sections
Added misc information I have found useful

-Highlighter from Fire/Mandiant
-RegRipper Registry tool for win forensics
-OSX Evidence Section
-Sandboxing/reversing tools (both local and online)
-Etherpad For document collaboration 
-Kibana for Big data visualization
-Elastic Search for Big Data searching (think log analysis)
-Book Section with Amazon link (feel free to change)
2015-11-25 15:19:43 -05:00
Meir Wahnon
0fbcebe4eb Merge pull request #18 from meirwah/SEC-squad-master
Sec squad master
2015-11-25 22:15:16 +02:00
meir
fb02d03ed6 remove duplicate DumpIt 2015-11-25 22:13:18 +02:00
John Troony
ada6c7fa7e Add DumpIt and Redline
DumpIt is a Windows memory imaging tool. It makes use of win32dd and win64dd. Redline on the other hand, is a all in one tool that can assist in development of a threat assessment profile.
2015-11-25 12:57:21 +00:00
Meir Wahnon
cf5abaef21 Merge pull request #16 from hslatman/hs_20151124
AChoir + DumpIt
2015-11-24 13:20:12 +02:00
Herman Slatman
353fb86e01 AChoir Scripting Platform for Windows IR Utilities 2015-11-24 11:58:29 +01:00
Herman Slatman
bdaf02a07b DumpIt by MoonSols; generic download page 2015-11-24 11:57:20 +01:00
Meir Wahnon
eda079fa60 Add Pt-Stalk tool 2015-11-24 09:42:37 +02:00
Meir Wahnon
42241e9a25 Merge pull request #15 from hslatman/hs_data_collection
Data Collection Category
2015-11-22 16:37:38 +02:00
Herman Slatman
14054aba6c Change of category title + link 2015-11-22 15:33:34 +01:00
Herman Slatman
f9f0316d19 FastIR Collector added 2015-11-22 15:28:06 +01:00
Herman Slatman
b1d25f7656 Move FECT + PSRecon to Data Collection 2015-11-22 15:27:23 +01:00
Herman Slatman
9fb87f438b Link data collection in contents 2015-11-22 15:26:43 +01:00
Herman Slatman
0a387d4c2c Data Collection category added 2015-11-22 15:25:02 +01:00
Meir Wahnon
a3ca596a6f Small fix 2015-11-21 09:44:39 +02:00
Meir Wahnon
7159e5b0ac Adding rekall 2015-11-21 09:44:09 +02:00
Meir Wahnon
28dcc63414 Merge pull request #13 from hslatman/hs_20151120a
PSRecon by LogRhythm PowerShell Tool
2015-11-20 15:49:10 +02:00
Herman Slatman
370ce39996 PSRecon by LogRhythm PowerShell Tool 2015-11-20 14:43:08 +01:00
Meir Wahnon
47e5a4cb31 Merge pull request #11 from meirwah/info
elaborate info
2015-11-20 12:02:48 +02:00
Meir Wahnon
b8035c51b1 linkify DFIR 2015-11-20 12:02:32 +02:00
Meir Wahnon
24abc537c8 elaborate info 2015-11-18 20:16:53 +02:00
Meir Wahnon
50c48aab0a Merge pull request #10 from hslatman/hs_20151118
Kansa, RTIR, FECT added
2015-11-18 13:39:27 +02:00
Herman Slatman
b5418d9cdf Request Tracker for Incident Response (RTIR) added 2015-11-18 12:15:45 +01:00
Herman Slatman
6a5634807e Kansa Modular Powershell Framework 2015-11-18 12:14:55 +01:00
Herman Slatman
d7d36c83ff Fast Evidence Collector Toolkit 2015-11-18 12:13:07 +01:00
Meir Wahnon
046a9c79ef fix videos link 2015-11-17 22:03:27 +02:00
Herman Slatman
1a5f130ba0 Added incident management to 'contents' 2015-11-17 14:56:10 +01:00
Meir Wahnon
c1b7b4a9d5 Merge pull request #9 from hslatman/hs_fir
New Category: Incident Management
2015-11-17 12:17:34 +02:00
Herman Slatman
606c887b2c Sandia Cyber Omni Tracker added 2015-11-17 10:53:46 +01:00
Herman Slatman
6c75fde30f New category 'Incident Management' + Fast Incident Response 2015-11-17 10:51:52 +01:00
Meir Wahnon
bf05404d09 Add Hindsight 2015-11-16 20:35:05 +02:00
Meir Wahnon
3a8063d67a Merge pull request #7 from hslatman/hs_fido
FIDO by Netflix
2015-11-16 09:57:54 +02:00
Meir Wahnon
dd65dbc95c Merge pull request #8 from hslatman/hs_future_incident_response
The Future of Insident Response Presentation by Bruce Schneier
2015-11-16 09:56:57 +02:00
Herman Slatman
834d9e9693 FIDO by Netflix 2015-11-16 08:40:04 +01:00
Herman Slatman
af2afe48f1 The Future of Insident Response by Bruce Schneier 2015-11-16 08:36:40 +01:00
Meir Wahnon
139c407dd8 Merge pull request #6 from hslatman/hs_osquery
Osquery by Facebook
2015-11-15 11:39:56 +02:00
Meir Wahnon
1c137b467d Merge pull request #5 from hslatman/hs_mig
Mozilla Investigator
2015-11-15 11:36:35 +02:00
Herman Slatman
b242b9cdaf osquery by Facebook added 2015-11-15 09:07:08 +01:00
Herman Slatman
f8d2a8d1e2 Mozilla Investigator added 2015-11-15 09:02:23 +01:00
Meir Wahnon
6d78cce9a3 Merge pull request #4 from meirwah/hslatman-hs_mozdef
Hslatman hs mozdef
2015-11-15 00:53:55 +02:00
meir
f86f349de6 Merge branch 'master' of github.com:meirwah/awesome-incident-response into hslatman-hs_mozdef
# Conflicts:
#	README.md
2015-11-15 00:53:51 +02:00
meir
8b1f86050a Merge branch 'hs_mozdef' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_mozdef
# Conflicts:
#	README.md
2015-11-15 00:51:47 +02:00
Meir Wahnon
3191c49162 Merge pull request #3 from meirwah/hslatman-hs_grr
Hslatman hs grr
2015-11-15 00:35:22 +02:00
meir
7a9faa9b2e Merge branch 'hs_grr' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_grr
# Conflicts:
#	README.md
2015-11-15 00:34:01 +02:00