Awesome-Mirrors/awesome-incident-response
1
0
Fork 0
mirror of https://github.com/meirwah/awesome-incident-response.git synced 2024-12-29 17:16:18 -05:00
Code Issues Packages Projects Releases Wiki Activity
449 Commits 3 Branches 0 Tags 1.8 MiB
60d7ae6b60
Commit Graph

301 Commits

Author SHA1 Message Date
chumstick
c71116c3c5 Fixed Formatting to Conform to Guidelines 2016-11-16 13:57:21 -05:00
chumstick
4f7352617b Added "Fidelis ThreatScanner" to Windows tools 2016-11-16 13:54:42 -05:00
Keith J. Jones
68a26a79e0 Merge branch 'master' of https://github.com/meirwah/awesome-incident-response into visualize_logs 2016-11-12 11:44:22 -05:00
Keith J. Jones
cda1ca8605 Added cuckoo log to project description. 2016-11-12 11:44:17 -05:00
Herman Slatman
c22a83df11 Add LMG 2016-11-10 01:29:48 +01:00
Herman Slatman
ccb093b0b1 Add VolatilityBot 2016-11-10 01:24:56 +01:00
Herman Slatman
bc1c24d754 Add TheHive 2016-11-10 01:20:25 +01:00
Meir Wahnon
7af1241d54 Merge pull request #76 from keithjjones/visualize_logs 
Added Visualize_Logs
 2016-11-06 20:33:43 +00:00
Meir Wahnon
500ac758dd Merge pull request #75 from bcarrier/master 
Added Cyber Triage.
 2016-10-24 10:24:53 +03:00
Keith J. Jones
7743a82fa6 Added Visualize_Logs. 2016-10-23 14:46:05 -04:00
Keith J. Jones
518772feb6 Added cuckoo-modified-api 2016-10-04 16:10:39 -04:00
Brian Carrier
3e462aac5e Added Cyber Triage. 2016-09-27 23:27:29 -04:00
Keith J. Jones
07b81326dd Alphabetized and capitalized. 2016-08-31 10:44:50 -04:00
Keith J. Jones
662dbd9904 Added two keithjjones tools. 2016-08-31 10:37:53 -04:00
Meir Wahnon
e42e2ecec3 Adding Zentral 
Adding Zentral to  All in one Tools
 2016-07-18 19:50:48 +03:00
Herman Slatman
a5ebd3e291 Remove period 2016-07-12 14:42:11 +02:00
Herman Slatman
f249e0dbf4 PALADIN added 2016-07-12 14:36:10 +02:00
Herman Slatman
9e767898bd Added Magnet RAM Capture 2016-07-12 14:30:38 +02:00
Herman Slatman
8567ec5e97 Added ACQUIRE 2016-07-12 14:27:08 +02:00
Herman Slatman
3a4fff6617 Added Falcon Orchestrator 2016-07-12 14:20:50 +02:00
Herman Slatman
abb133510d Added RaQet 2016-07-12 13:08:53 +02:00
Herman Slatman
b589680044 Added CimSweep 2016-07-12 13:01:53 +02:00
Herman Slatman
39374aa51a Added nightHawk 2016-07-12 12:58:40 +02:00
MikeDawg
a39de0c7ba Added NST, and fixed a couple EOLs 2016-07-08 09:15:06 -06:00
MikeDawg
4d3ed91f0b Alphabetical order FTW 2016-06-30 11:50:07 -06:00
MikeDawg
d302552f03 Added X-Ray 2.0 2016-06-30 11:01:55 -06:00
Meir Wahnon
327602e8a6 remove DNS miner 
fixes #67
 2016-06-16 17:00:27 +03:00
Nedim Šabić
402349cc95 Add Fibratus 2016-06-07 16:18:06 +02:00
Herman Slatman
2f13ee5a59 Added Doorman 2016-06-01 21:51:21 +02:00
Meir Wahnon
37c0ba12e6 Adding LiME 
fixes #63
 2016-05-26 10:20:47 +03:00
Herman Slatman
a34ee4f49a SearchGiant added 2016-05-20 11:16:12 +02:00
Herman Slatman
5c05e15330 Kolide added 2016-05-09 09:50:23 +02:00
Meir Wahnon
3bb912af8b update playbooks link 
to https://www.incidentresponse.com/playbooks/
fixes #59
 2016-04-22 08:58:32 +03:00
Herman Slatman
620e5ab909 Rastrea2r added 2016-04-19 14:44:44 +02:00
Herman Slatman
0f6415af9b Add link. Stupid me. 2016-03-22 17:11:05 +01:00
Herman Slatman
694ea2faa4 ADIA added 2016-03-22 09:21:10 +01:00
Meir Wahnon
3d68cca1c3 Merge pull request #56 from mthlvt/master 
Lorg tool added
 2016-03-21 08:35:42 +02:00
Mat
3c69b3a9a9 Lorg tool added 
added a new tool called Lorg: a tool for advanced HTTPD logfile security analysis and forensics
 2016-03-21 11:36:18 +09:00
Meir Wahnon
1eb9cf6e28 Merge pull request #54 from meirwah/CDQR 
adding Cold Disk Quick Response tool
 2016-02-29 09:22:52 +02:00
Herman Slatman
f17a3be290 small addition to Lima Charlied entry 2016-02-26 23:20:45 +01:00
Herman Slatman
86bb4b11e9 CIRTkit added 2016-02-26 23:18:06 +01:00
Meir Wahnon
86e28d1612 adding Cold Disk Quick Response tool 2016-02-24 22:25:14 +02:00
Meir Wahnon
b5eeec36b1 reverting... 2016-02-24 19:50:41 +02:00
Meir Wahnon
a89acf7aa6 website for PMDump seems to have issues 
switching to http://www.securityfocus.com/tools/2466
 2016-02-24 19:49:54 +02:00
Meir Wahnon
2a3a0e3c98 add binaryforay tools 2016-02-23 22:53:34 +02:00
Interleaved
a8c4173d4a Fix typo in IR workflow gallery item 2016-02-21 10:25:07 +01:00
Interleaved
594f5d9a4c Add new playbooks item for IR workflow gallery 2016-02-21 10:18:49 +01:00
Meir Wahnon
600f5debf4 add playbooks section 2016-02-17 18:54:39 +02:00
ahhh
d808307223 Update README.md 
fix minor spelling error
 2016-02-16 16:44:18 -08:00
Meir Wahnon
e0ab1523e4 small change 2016-02-15 15:41:35 +02:00
Meir Wahnon
a45659f71b remove unneeded comma 2016-02-15 15:40:04 +02:00
Meir Wahnon
ee7b5d8759 Adding KonckKnock 
to OSX section
 2016-02-15 15:38:47 +02:00
Meir Wahnon
cffffd65be Adding PowerForensics 
to Windows Evidence Collection
 2016-02-04 09:48:18 +02:00
Herman Slatman
1b43cabd08 Another (local) conflict resolved 2016-01-27 13:51:18 +01:00
Herman Slatman
c8bdf8bab9 Merge conflict resolved 2016-01-27 13:49:51 +01:00
Herman Slatman
c3655a5516 Removed some dots 2016-01-27 13:19:02 +01:00
Herman Slatman
ee0db994b1 Removed some dots 2016-01-27 13:16:37 +01:00
Herman Slatman
dd9b8ff64d small typos 2016-01-27 12:28:07 +01:00
Herman Slatman
feaf021164 Adding Linux evidence collection entry 2016-01-27 12:25:53 +01:00
Herman Slatman
7977ac9c78 FastIR for Linux added 2016-01-27 12:25:02 +01:00
Meir Wahnon
7d009f4273 Adding Crits 
To other section
 2016-01-26 09:47:44 +02:00
ReadmeCritic
0e0c029d4e Update README URLs based on HTTP redirects 2016-01-20 12:29:56 -08:00
Meir Wahnon
5b6fd16115 fix DFIR intro 2016-01-13 20:55:34 +02:00
Meir Wahnon
f0d7b27673 Remove dots at end of line + add intro section 2016-01-13 20:52:49 +02:00
Meir Wahnon
075d2a5796 fix empty raw 2016-01-09 14:21:54 +02:00
Meir Wahnon
fe443b7452 Add Evidence collectors section 
for multi platform
 2016-01-09 14:16:04 +02:00
Meir Wahnon
b60bd66747 Merge pull request #40 from hslatman/hs_20160108 
Fenrir + bulk_extractor
 2016-01-09 14:11:22 +02:00
Herman Slatman
a6e31beea3 Stenographer buffered PCAP capture solution added 2016-01-09 11:22:43 +01:00
Herman Slatman
fb442c4a5a bulk_extractor added 2016-01-08 18:58:38 +01:00
Herman Slatman
7198f75f19 Fenrir IOC scanner added 2016-01-08 18:46:00 +01:00
Meir Wahnon
ada4d000f6 Adding Belkasoft Evidence Center 2016-01-07 23:39:50 +02:00
Meir Wahnon
afbf73468a Adding Limacharlie 2016-01-04 09:26:40 +02:00
Herman Slatman
b94e155720 2nd link removed + 'typo' 2015-12-23 10:46:17 +01:00
Herman Slatman
b5c7ececb8 Merging DEFT and DEFT Zero 2015-12-23 10:32:56 +01:00
Herman Slatman
1a8cd130ee DEFT Zero (light DEFT) added 2015-12-21 13:38:55 +01:00
Herman Slatman
91111f0a8e DEFT Linux Distro added 2015-12-21 13:33:41 +01:00
Herman Slatman
50f5574a56 CAINE Live added 2015-12-21 13:30:04 +01:00
Herman Slatman
2b7f5a0bc5 SIFT Workstation added 2015-12-18 13:19:04 +01:00
Meir Wahnon
877119aa70 Merge pull request #36 from hslatman/hs_category_linux_distro 
Move Security Onion to Linux Distributions Category + slight descript…
 2015-12-17 13:43:02 +02:00
Herman Slatman
39cbfa075d Move Security Onion to Linux Distributions Category + slight description change 2015-12-14 21:44:57 +01:00
MikeDawg
a96753db32 Update Readme.md - Added Triage-IR 
Added Triage-IR
 2015-12-14 11:40:10 -07:00
Herman Slatman
2c8cb30576 threat_note name changed to real name + slightly more descriptive description 2015-12-14 10:12:48 +01:00
Herman Slatman
b1079e3be9 Envdb added 2015-12-14 10:09:57 +01:00
Herman Slatman
70e14eef1c BriMor Labs Live Response Collection added 2015-12-14 10:07:03 +01:00
Meir Wahnon
dcdbedb963 Remove DumpIT - seems the project is not maintained anymore 2015-12-13 15:04:20 +02:00
Meir Wahnon
fa6043b92d Add threat-note tool 2015-12-12 23:49:52 +02:00
Craig Davison
68813319cc Fix VirusTotal link 2015-12-12 17:38:37 +00:00
Craig Davison
9a88b11d2d Update URLs based on redirects 2015-12-12 17:38:17 +00:00
Rishi Bhargava
4e94b16a2f Editing the Slack community with signup form link and the community link 2015-12-11 22:34:41 -08:00
Scott J Roberts
1f98863a33 osxcollector because it's awesome 2015-12-11 13:24:51 -05:00
CSIRT hackery, Incident Response & Forensics
5c83458abb Added few services and tools 2015-12-10 21:12:28 +03:00
Herman Slatman
32068004e3 Crowd Response direct download replace by generic landing page 2015-12-06 12:26:14 +01:00
Herman Slatman
89e40b8b25 Crowd Response by CrowdStrike Added 2015-12-05 23:24:57 +01:00
Herman Slatman
7f935ab731 Extended Tracert by CIRCL added 2015-12-03 11:56:50 +01:00
Herman Slatman
9206f8ef6d DNS Miner 2015-12-01 18:59:57 +01:00
Meir Wahnon
dc194f6b64 Add Communities part 2015-12-01 11:28:14 +02:00
Herman Slatman
4c6189b2f0 IOC Finder added 2015-11-28 14:29:38 +01:00
Herman Slatman
d7df2064ac Memoryze for Mac 2015-11-26 09:32:30 +01:00
Herman Slatman
bc50301d82 Memoryze added 2015-11-26 09:32:04 +01:00
Meir Wahnon
4e5377ae63 Merge pull request #19 from mikesxrs/Adding-multiple-sections 
Adding content to Win forensics and other tools; Adding sections for OSX forensics,Sandboxing/reversing and Books
 2015-11-26 09:05:31 +02:00
Mike Worth
9d4088fbb4 Update README.md 2015-11-25 18:01:35 -05:00
mikesxrs
0cdb45e377 Update README.md 2015-11-25 17:16:00 -05:00
mikesxrs
d6a8e61bd8 Adding multiple sections 
Added misc information I have found useful

-Highlighter from Fire/Mandiant
-RegRipper Registry tool for win forensics
-OSX Evidence Section
-Sandboxing/reversing tools (both local and online)
-Etherpad For document collaboration 
-Kibana for Big data visualization
-Elastic Search for Big Data searching (think log analysis)
-Book Section with Amazon link (feel free to change)
 2015-11-25 15:19:43 -05:00
meir
fb02d03ed6 remove duplicate DumpIt 2015-11-25 22:13:18 +02:00
John Troony
ada6c7fa7e Add DumpIt and Redline 
DumpIt is a Windows memory imaging tool. It makes use of win32dd and win64dd. Redline on the other hand, is a all in one tool that can assist in development of a threat assessment profile.
 2015-11-25 12:57:21 +00:00
Meir Wahnon
cf5abaef21 Merge pull request #16 from hslatman/hs_20151124 
AChoir + DumpIt
 2015-11-24 13:20:12 +02:00
Herman Slatman
353fb86e01 AChoir Scripting Platform for Windows IR Utilities 2015-11-24 11:58:29 +01:00
Herman Slatman
bdaf02a07b DumpIt by MoonSols; generic download page 2015-11-24 11:57:20 +01:00
Meir Wahnon
eda079fa60 Add Pt-Stalk tool 2015-11-24 09:42:37 +02:00
Herman Slatman
14054aba6c Change of category title + link 2015-11-22 15:33:34 +01:00
Herman Slatman
f9f0316d19 FastIR Collector added 2015-11-22 15:28:06 +01:00
Herman Slatman
b1d25f7656 Move FECT + PSRecon to Data Collection 2015-11-22 15:27:23 +01:00
Herman Slatman
9fb87f438b Link data collection in contents 2015-11-22 15:26:43 +01:00
Herman Slatman
0a387d4c2c Data Collection category added 2015-11-22 15:25:02 +01:00
Meir Wahnon
a3ca596a6f Small fix 2015-11-21 09:44:39 +02:00
Meir Wahnon
7159e5b0ac Adding rekall 2015-11-21 09:44:09 +02:00
Herman Slatman
370ce39996 PSRecon by LogRhythm PowerShell Tool 2015-11-20 14:43:08 +01:00
Meir Wahnon
b8035c51b1 linkify DFIR 2015-11-20 12:02:32 +02:00
Meir Wahnon
24abc537c8 elaborate info 2015-11-18 20:16:53 +02:00
Meir Wahnon
50c48aab0a Merge pull request #10 from hslatman/hs_20151118 
Kansa, RTIR, FECT added
 2015-11-18 13:39:27 +02:00
Herman Slatman
b5418d9cdf Request Tracker for Incident Response (RTIR) added 2015-11-18 12:15:45 +01:00
Herman Slatman
6a5634807e Kansa Modular Powershell Framework 2015-11-18 12:14:55 +01:00
Herman Slatman
d7d36c83ff Fast Evidence Collector Toolkit 2015-11-18 12:13:07 +01:00
Meir Wahnon
046a9c79ef fix videos link 2015-11-17 22:03:27 +02:00
Herman Slatman
1a5f130ba0 Added incident management to 'contents' 2015-11-17 14:56:10 +01:00
Herman Slatman
606c887b2c Sandia Cyber Omni Tracker added 2015-11-17 10:53:46 +01:00
Herman Slatman
6c75fde30f New category 'Incident Management' + Fast Incident Response 2015-11-17 10:51:52 +01:00
Meir Wahnon
bf05404d09 Add Hindsight 2015-11-16 20:35:05 +02:00
Meir Wahnon
3a8063d67a Merge pull request #7 from hslatman/hs_fido 
FIDO by Netflix
 2015-11-16 09:57:54 +02:00
Herman Slatman
834d9e9693 FIDO by Netflix 2015-11-16 08:40:04 +01:00
Herman Slatman
af2afe48f1 The Future of Insident Response by Bruce Schneier 2015-11-16 08:36:40 +01:00
Meir Wahnon
139c407dd8 Merge pull request #6 from hslatman/hs_osquery 
Osquery by Facebook
 2015-11-15 11:39:56 +02:00
Herman Slatman
b242b9cdaf osquery by Facebook added 2015-11-15 09:07:08 +01:00
Herman Slatman
f8d2a8d1e2 Mozilla Investigator added 2015-11-15 09:02:23 +01:00
meir
f86f349de6 Merge branch 'master' of github.com:meirwah/awesome-incident-response into hslatman-hs_mozdef 
# Conflicts:
#	README.md
 2015-11-15 00:53:51 +02:00
meir
8b1f86050a Merge branch 'hs_mozdef' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_mozdef 
# Conflicts:
#	README.md
 2015-11-15 00:51:47 +02:00
meir
7a9faa9b2e Merge branch 'hs_grr' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_grr 
# Conflicts:
#	README.md
 2015-11-15 00:34:01 +02:00
Herman Slatman
343ee6bad5 MozDef by Mozilla added 2015-11-14 20:10:17 +01:00
Meir Wahnon
b4dd033ef8 add timeline 2015-11-14 19:43:28 +02:00
Meir Wahnon
271896540e Update README.md 2015-11-14 19:36:14 +02:00
Meir Wahnon
40d585d06c add video 2015-11-14 19:35:05 +02:00
Herman Slatman
20bfebb726 GRR Rapid Response added 2015-11-14 18:13:40 +01:00
Meir Wahnon
11b3ca17cb evolve update 2015-11-13 23:18:11 +02:00
Meir Wahnon
75604e50cf Update README.md 2015-11-13 23:17:07 +02:00
Meir Wahnon
7dcf68cf53 add All in one Tools 2015-11-13 23:13:59 +02:00
Meir Wahnon
ef66a82c26 add Process dump tools 2015-11-13 23:08:59 +02:00
Meir Wahnon
94b0259e36 add Memory Imaging Tools 2015-11-13 21:15:55 +02:00
Meir Wahnon
5a6fabdb3f Add memory Analysis Tools 2015-11-13 20:23:10 +02:00
Meir Wahnon
1cea169b7f Update README.md 2015-11-11 00:26:45 +02:00
Meir Wahnon
65d359b632 Update README 2015-11-11 00:13:26 +02:00
Meir Wahnon
dd88201463 Initial commit 2015-11-11 00:10:58 +02:00