Awesome-Mirrors/awesome-incident-response
1
0
Fork 0
mirror of https://github.com/meirwah/awesome-incident-response.git synced 2024-10-01 01:06:19 -04:00
Code Issues Packages Projects Releases Wiki Activity
475 Commits 3 Branches 0 Tags 1.7 MiB
5f4277df1d
Commit Graph

316 Commits

Author SHA1 Message Date
Thiago Canozzo Lahr
6b242418a7 upd: UAC tool description updated 
Signed-off-by: Thiago Canozzo Lahr <tclahr@br.ibm.com>
 2021-02-22 22:58:15 -03:00
Ahmed Elshaer
e7d0d54c68
replacing kolide with fleetdm 
positioned in the correct order
 2021-01-25 10:21:17 +01:00
Ahmed Elshaer
4bbc34149a
replacing kolide with fleetdm 2021-01-25 09:40:16 +01:00
RDxR10
3cea504804
Fixed some typos :) 2020-10-31 00:28:37 +05:30
Explie
05a18e7b0f
Resolving PR comments 
Resolving Review https://github.com/meirwah/awesome-incident-response/pull/158
 2020-10-28 16:41:10 +01:00
Explie
cca8e193cc
Updating IOCFinder description, no longer maintained 2020-10-28 13:56:26 +01:00
Explie
ed8a880c4e
Removing TRIAGE-IR, old and unavailable 
Source code unavailable. Last deployment Nov 9, 2012
 2020-10-28 13:54:15 +01:00
Explie
f925159070
Updating dead RegRipper Link 2020-10-28 13:52:14 +01:00
Explie
6a69cc8d88
Removing Fidelis TS, no longer available 2020-10-28 13:51:13 +01:00
Explie
cc25ebae59
Removing FECT, no longer maintained nor running 
Development status
FECT is no longer maintained
 2020-10-28 13:49:54 +01:00
Explie
aa6a76b2fe
Removing binforray, no longer available 
Replaced by https://ericzimmerman.github.io/
 2020-10-28 13:48:58 +01:00
Explie
98b2496fc9
Fixing dead Cuckoo SB Link 
Fixing dead Cuckoo SB Link
 2020-10-28 13:44:36 +01:00
Explie
892d4a694c
Updating CAPE with newer Version CAPEv2 
Updating CAPE with newer Version CAPEv2
 2020-10-28 13:44:01 +01:00
Explie
b5cbb95ece
Replacing User Mode Process Dumper with ProcDump 
The Microsoft User Mode Process Dumper is no longer available. Alternate Sysinternals Tool would be ProcDump
 2020-10-28 13:43:10 +01:00
Explie
22b3932946
Updating KnockKnock Link, no longer open source 
Updating KnockKnock Link, no longer open source
 2020-10-28 13:40:46 +01:00
Explie
81578c73b2
Removing searchgiant, no longer available 
Searchgiant is no longer maintained nor available
 2020-10-28 13:38:59 +01:00
Explie
d4e625314c
Updating old rastrea2r link 
Updating old rastrea2r link
 2020-10-28 13:36:53 +01:00
Explie
3492ba4daa
Fixing broken WindowsSCOPE link 
Fixing broken WindowsSCOPE link
 2020-10-28 13:36:05 +01:00
Explie
583b1f397d
Removing KnTTools , no longer available 
KnTTools are no longer available. The only left over artifacts are: https://github.com/yuzhangiot/kntTools
 2020-10-28 13:34:06 +01:00
Explie
19cf0b602a
Fixing demisto dead links 
Removing dead demisto links and updating with the replacement tool XSOAR
 2020-10-28 13:31:25 +01:00
Explie
ec5a86b752
Fixing SCOT Link 
Replacing the unstable gov link with the github repo
 2020-10-28 13:27:54 +01:00
Explie
57231dfb48
Updating LimaCharlie Link 
Updating link to website since community open source version is no longer maintained
 2020-10-28 13:25:16 +01:00
Explie
bedf9f56bf
Removing Envdb, replaced by Kolide 
Envdb is replaced by Kolide which is already in the list
 2020-10-28 13:22:56 +01:00
Thiago Lahr
55c89ddc40 UAC tool added 
UAC tool added to the Evidence Collection list.

Signed-off-by: Thiago Lahr <tclahr@br.ibm.com>
 2020-10-23 18:18:04 -03:00
Peter Thaleikis
f071a3ddb4
Fixing Memoryze link 2020-10-16 10:41:31 +04:00
Peter Thaleikis
5364372943
Removing "Digital Forensics Framework": website gone 2020-09-30 16:27:49 +04:00
Sarkis Nanyan
820b78c0d6
fix order; 2020-07-23 12:26:38 +03:00
Sarkis Nanyan
fc56a63e03
add AVML memory acquisition tool 2020-07-22 18:40:34 +03:00
fabacab
a1a34dcf1e
Remove Mozilla Investigator (MIG), retired in favor of MozDef. 2020-06-18 14:24:46 -04:00
Meir Wahnon
4787e12d29
Merge pull request #148 from Karneades/patch-4 
Add Invoke-LiveResponse to Windows live collection
 2020-06-17 08:51:07 +03:00
Meir Wahnon
620b720813
Merge pull request #150 from Karneades/patch-2 
Add artifactcollector to evidence collection
 2020-06-17 08:50:28 +03:00
Meir Wahnon
abac9a3b57
Merge pull request #151 from stuhli/master 
Add some tools
 2020-06-17 08:49:34 +03:00
Meir Wahnon
52535d3210
Merge pull request #145 from Karneades/patch-1 
Add PowerGRR API client as addition to GRR
 2020-06-17 08:46:35 +03:00
Mathias Stuhlmacher
887dd7c188 Add some tools 2020-05-13 18:57:00 +02:00
Andreas Hunkeler
214a965de3
Add artifactcollector to evidence collection 2020-04-06 16:56:52 +02:00
Meir Wahnon
03bb3eacbb
Merge pull request #146 from Karneades/patch-2 
Add PowerSponse as containment tool
 2020-04-06 12:57:32 +03:00
Meir Wahnon
a5434d71e4
Merge pull request #147 from Karneades/patch-3 
Add IRTriage Windows evidence collection tool
 2020-04-06 12:53:48 +03:00
Andreas Hunkeler
92f687ae4c
Add CyLR to evidence collection 2020-04-06 11:42:12 +02:00
Andreas Hunkeler
a1a723cd8f
Add Invoke-LiveResponse to Windows live collection 2020-04-06 11:39:43 +02:00
Andreas Hunkeler
214ab6cb1f
Add IRTriage Windows evidence collection tool 2020-04-06 11:36:57 +02:00
Andreas Hunkeler
3a838c67ee
Add PowerSponse as containment tool 2020-04-06 11:33:34 +02:00
Andreas Hunkeler
075d3802af
Add PowerGRR API client as addition to GRR 2020-04-06 11:29:45 +02:00
Philip Tully
d1b2c47647 fixes formatting 2020-03-11 13:14:10 -04:00
Philip Tully
d72ca2cc60 Adds StringSifter 2020-03-11 13:11:37 -04:00
Meir Wahnon
0556ba2c58
update slack community link 2020-01-18 09:51:30 +02:00
Bart
fdef171a92
Update README.md 
Add CAPE sandbox.
 2019-11-03 14:07:12 +01:00
thefear100
0dc6f6b027
Update README.md 2019-10-31 12:55:35 -07:00
thefear100
6f1131cc0c
Update README.md 2019-10-31 12:55:12 -07:00
thefear100
0ca9d52209
Update README.md 2019-10-30 11:24:20 -07:00
Karol Trociński
2fdb66e00f
Update README.md 2019-10-26 10:07:40 +00:00
Karol Trociński
522e37f639
Add MalConfScan volatility plugin. 2019-10-26 10:00:23 +00:00
actualmermaid
e147176811
Update README.md 2019-10-17 11:38:36 -07:00
Herman Slatman
7cad62c65f
Add DFIR ORC 2019-09-24 10:51:24 +02:00
Bryan Bowie
18bc422371
Update README.md 
Added in several new tools as well as removed Malwr as it is no longer available at this time.
 2019-09-02 12:40:45 -04:00
Tony Phipps
174faaae58
Update README.md 2019-08-28 07:12:35 -04:00
Tony Phipps
7db1d4b1c0
Update README.md 2019-08-27 23:29:19 -04:00
Alexey Dolgikh
3945bce515
Update README.md 2019-06-03 09:53:54 +03:00
Alexey Dolgikh
e6817c1d19
Update README.md 
Adds Kaspersky CyberTrace and Kaspersky Threat Intelligence Portal
 2019-05-28 12:15:36 +03:00
Herman Slatman
1a4ab6dcf0
Fix errors after merge 2018-11-27 17:51:52 +01:00
Herman Slatman
045c36b3e9
Merge branch 'master' into hs_sysmon_search 2018-11-27 17:33:34 +01:00
Meitar M
c7366df265
Consistently use sentence casing, fix a typo, shorten verbose items. 
This commit continues the work to conform to the Awesome List style
guidelines. In this commit, item descriptions have been checked to
ensure they use sentence casing (first letter of the description must be
capitalized), a typo ("forenisic" -> "forensic") was fixed, and several
overly long descriptions that read too much like marketing material were
shortened to a single sentence for simplicity.
 2018-10-03 16:21:23 -04:00
Meitar M
6e4f1accca Continued style guide conformance fixes. 
This commit continues edits to make the list Awesome List conformant.
Specifically, this commit focuses on:

* Removing prepositions ("A," "An," "The," etc) from the start of items.
* Removing duplicated line item names from their descriptions.
* Expanding acronyms of line item names in the link itself.

Again, this is just one step in the process of making the list more
conformant to the Awesome List style guide and should not be considered
an exhaustive treatment.
 2018-10-03 15:47:22 -04:00
Meitar M
c7dc47c239 Begin style conformance with new Awesome List guides. 
The Awesome List style guide wants listed awesome lists to conform to a
particular style. Their style guide includes numerous items, some of
which are addressed by this commit. The items addressed herein include:

* Name of list as the top-level heading.
* Awesome badge placed to the right of the title, not underneath.
* Description of the list contents.
* All line items should end in appropriate punctuation (like a period).

This is a first pass and should not be considered an exhaustive
accounting of the style guide's recommendations.
 2018-10-03 15:44:51 -04:00
Herman Slatman
a3d57c4271
Merge branch 'master' into hs_sysmon_search 2018-10-01 21:12:35 +02:00
Herman Slatman
cb5016d109
Add StreamAlert 2018-10-01 20:14:38 +02:00
Herman Slatman
2b404faf3d
Add SysmonSearch 2018-10-01 20:10:43 +02:00
CIRT Josh
e84f24cc69
Update README.md 2018-08-30 17:31:50 +01:00
CIRT Josh
1fcabb74c4
Merge pull request #1 from meirwah/master 
Update
 2018-08-30 17:28:40 +01:00
Meitar M
87ae91b21e
Add Scout2, an AWS assessment and (semi-)automated account hardening tool. 2018-08-22 14:00:32 -04:00
Meitar M
8433df3be6
Add Margarita Shotgun, a Python-based remote memory acquisition tool. 2018-08-22 14:00:12 -04:00
Herman Slatman
81805dfaeb
Add Diffy 2018-07-17 22:47:56 +02:00
Binalyze
4626070758
Update README.md 
Added the word free.
 2018-06-17 22:23:30 +03:00
Binalyze
866884f933
Update README.md 
Added IREC into Windows Evidence Collection list.
 2018-06-17 22:22:30 +03:00
Meir Wahnon
097454d7b8
Merge pull request #107 from hslatman/hs_adversary_emulation 
Add Adversary Emulation section
 2018-05-12 09:51:21 -07:00
nogoodconfig
6c38544120 Added PyaraScanner 2018-05-03 15:30:52 +01:00
nogoodconfig
c3320ee0d3 Added PyaraScanner 2018-05-03 15:30:01 +01:00
megan201296
52282a826c
Update README.md 
Removed `s` in `https://augmentd.co/`. augmentd only uses `http`
 2018-04-24 17:01:30 -05:00
Logically Secure Ltd
d1b3ae2a58
Update README.md 
Added CyberCPR as Incident Management tool
 2018-04-12 17:53:15 +04:00
dogoncouch
b0ef858927 Add logdissect log analysis tool (CLI/Python API) 2018-03-27 14:18:54 -04:00
Herman Slatman
534f7837f4
Add several Adversary Emulation tools 2018-03-24 12:14:31 +01:00
Herman Slatman
e93c03bfb2
Add Caldera 2018-03-24 12:02:13 +01:00
Herman Slatman
99443b07ea
Merge branch 'master' of https://github.com/meirwah/awesome-incident-response into hs_adversary_emulation 2018-03-24 11:59:56 +01:00
Herman Slatman
682ae1a62a
Add Adversary Emulation section 2018-03-24 11:55:46 +01:00
Meir Wahnon
f6ba87baf7
Merge pull request #103 from deralexxx/patch-1 
API list
 2018-02-20 22:53:50 -08:00
Alexander J
700ed12699
Update README.md 2018-02-20 22:24:07 +01:00
Alexander J
cbe381c8f5
Update README.md 
updated
 2018-02-20 21:13:47 +01:00
chadmando
d88c1b898f
Fix Books section DFIR Intro link 
Scott Roberts DFIR Intro link is broken, pointed to his Medium post on the same topic
 2018-02-19 09:56:16 -06:00
Meir Wahnon
17d24c69de
adding helk 
adding helk
 2018-01-17 17:56:55 +02:00
Alexander J
8be7413c8c
Update README.md 2018-01-16 13:11:00 +01:00
Alexander J
69977b1bf4
Update README.md 2018-01-14 17:38:06 +01:00
Alexander J
ba892960f3
API list 
Hope that is good enough for the awesome list.
 2018-01-14 17:36:48 +01:00
Yogesh Khatri (@swiftforensics)
e5637704ba
Added mac_apt under OSX category 2018-01-07 00:11:05 -05:00
Theta Gamma
2bed4f7cb2
Update README.md 2017-11-15 11:40:55 +01:00
Theta Gamma
4d615bbeaf
Update README.md 
FIDO is deprecated at Netflix and this repository is no longer maintained. -> removed
added CCF-VM to linux-distributions
 2017-11-15 11:36:12 +01:00
sabandosoleda
8fedf97fa6
fixed alphabetical order 2017-11-04 18:35:36 +01:00
sabandosoleda
5ed90e2758
Add Bitscout 
Please add Bitscout as a trustable remote forensics and acquisition livecd builder tool! Thank you
 2017-11-04 16:52:43 +01:00
Brie Carranza
2a5218dade Add morgue by etsy 2017-10-24 17:02:40 -04:00
Herman Slatman
56e4f3bcc5 Add DumpsterFire 
And move sqhunter to turn the list into alphabetical order again
 2017-10-20 14:27:00 +02:00
Herman Slatman
a4d0fc1216 Add Kolide Fleet 
Removed the old, out-dated Kolide entry
 2017-10-19 08:16:07 +02:00
Tomas Hertus
a2fa9c460c Add Metadefender Cloud 2017-06-28 10:11:41 -07:00