Commit Graph

111 Commits

Author SHA1 Message Date
CSIRT hackery, Incident Response & Forensics
5c83458abb Added few services and tools 2015-12-10 21:12:28 +03:00
Herman Slatman
32068004e3 Crowd Response direct download replace by generic landing page 2015-12-06 12:26:14 +01:00
Herman Slatman
89e40b8b25 Crowd Response by CrowdStrike Added 2015-12-05 23:24:57 +01:00
Herman Slatman
7f935ab731 Extended Tracert by CIRCL added 2015-12-03 11:56:50 +01:00
Herman Slatman
9206f8ef6d DNS Miner 2015-12-01 18:59:57 +01:00
Meir Wahnon
dc194f6b64 Add Communities part 2015-12-01 11:28:14 +02:00
Herman Slatman
4c6189b2f0 IOC Finder added 2015-11-28 14:29:38 +01:00
Herman Slatman
d7df2064ac Memoryze for Mac 2015-11-26 09:32:30 +01:00
Herman Slatman
bc50301d82 Memoryze added 2015-11-26 09:32:04 +01:00
Meir Wahnon
4e5377ae63 Merge pull request #19 from mikesxrs/Adding-multiple-sections
Adding content to Win forensics and other tools; Adding sections for OSX forensics,Sandboxing/reversing and Books
2015-11-26 09:05:31 +02:00
Mike Worth
9d4088fbb4 Update README.md 2015-11-25 18:01:35 -05:00
mikesxrs
0cdb45e377 Update README.md 2015-11-25 17:16:00 -05:00
mikesxrs
d6a8e61bd8 Adding multiple sections
Added misc information I have found useful

-Highlighter from Fire/Mandiant
-RegRipper Registry tool for win forensics
-OSX Evidence Section
-Sandboxing/reversing tools (both local and online)
-Etherpad For document collaboration 
-Kibana for Big data visualization
-Elastic Search for Big Data searching (think log analysis)
-Book Section with Amazon link (feel free to change)
2015-11-25 15:19:43 -05:00
meir
fb02d03ed6 remove duplicate DumpIt 2015-11-25 22:13:18 +02:00
John Troony
ada6c7fa7e Add DumpIt and Redline
DumpIt is a Windows memory imaging tool. It makes use of win32dd and win64dd. Redline on the other hand, is a all in one tool that can assist in development of a threat assessment profile.
2015-11-25 12:57:21 +00:00
Meir Wahnon
cf5abaef21 Merge pull request #16 from hslatman/hs_20151124
AChoir + DumpIt
2015-11-24 13:20:12 +02:00
Herman Slatman
353fb86e01 AChoir Scripting Platform for Windows IR Utilities 2015-11-24 11:58:29 +01:00
Herman Slatman
bdaf02a07b DumpIt by MoonSols; generic download page 2015-11-24 11:57:20 +01:00
Meir Wahnon
eda079fa60 Add Pt-Stalk tool 2015-11-24 09:42:37 +02:00
Herman Slatman
14054aba6c Change of category title + link 2015-11-22 15:33:34 +01:00
Herman Slatman
f9f0316d19 FastIR Collector added 2015-11-22 15:28:06 +01:00
Herman Slatman
b1d25f7656 Move FECT + PSRecon to Data Collection 2015-11-22 15:27:23 +01:00
Herman Slatman
9fb87f438b Link data collection in contents 2015-11-22 15:26:43 +01:00
Herman Slatman
0a387d4c2c Data Collection category added 2015-11-22 15:25:02 +01:00
Meir Wahnon
a3ca596a6f Small fix 2015-11-21 09:44:39 +02:00
Meir Wahnon
7159e5b0ac Adding rekall 2015-11-21 09:44:09 +02:00
Herman Slatman
370ce39996 PSRecon by LogRhythm PowerShell Tool 2015-11-20 14:43:08 +01:00
Meir Wahnon
b8035c51b1 linkify DFIR 2015-11-20 12:02:32 +02:00
Meir Wahnon
24abc537c8 elaborate info 2015-11-18 20:16:53 +02:00
Meir Wahnon
50c48aab0a Merge pull request #10 from hslatman/hs_20151118
Kansa, RTIR, FECT added
2015-11-18 13:39:27 +02:00
Herman Slatman
b5418d9cdf Request Tracker for Incident Response (RTIR) added 2015-11-18 12:15:45 +01:00
Herman Slatman
6a5634807e Kansa Modular Powershell Framework 2015-11-18 12:14:55 +01:00
Herman Slatman
d7d36c83ff Fast Evidence Collector Toolkit 2015-11-18 12:13:07 +01:00
Meir Wahnon
046a9c79ef fix videos link 2015-11-17 22:03:27 +02:00
Herman Slatman
1a5f130ba0 Added incident management to 'contents' 2015-11-17 14:56:10 +01:00
Herman Slatman
606c887b2c Sandia Cyber Omni Tracker added 2015-11-17 10:53:46 +01:00
Herman Slatman
6c75fde30f New category 'Incident Management' + Fast Incident Response 2015-11-17 10:51:52 +01:00
Meir Wahnon
bf05404d09 Add Hindsight 2015-11-16 20:35:05 +02:00
Meir Wahnon
3a8063d67a Merge pull request #7 from hslatman/hs_fido
FIDO by Netflix
2015-11-16 09:57:54 +02:00
Herman Slatman
834d9e9693 FIDO by Netflix 2015-11-16 08:40:04 +01:00
Herman Slatman
af2afe48f1 The Future of Insident Response by Bruce Schneier 2015-11-16 08:36:40 +01:00
Meir Wahnon
139c407dd8 Merge pull request #6 from hslatman/hs_osquery
Osquery by Facebook
2015-11-15 11:39:56 +02:00
Herman Slatman
b242b9cdaf osquery by Facebook added 2015-11-15 09:07:08 +01:00
Herman Slatman
f8d2a8d1e2 Mozilla Investigator added 2015-11-15 09:02:23 +01:00
meir
f86f349de6 Merge branch 'master' of github.com:meirwah/awesome-incident-response into hslatman-hs_mozdef
# Conflicts:
#	README.md
2015-11-15 00:53:51 +02:00
meir
8b1f86050a Merge branch 'hs_mozdef' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_mozdef
# Conflicts:
#	README.md
2015-11-15 00:51:47 +02:00
meir
7a9faa9b2e Merge branch 'hs_grr' of https://github.com/hslatman/awesome-incident-response into hslatman-hs_grr
# Conflicts:
#	README.md
2015-11-15 00:34:01 +02:00
Herman Slatman
343ee6bad5 MozDef by Mozilla added 2015-11-14 20:10:17 +01:00
Meir Wahnon
b4dd033ef8 add timeline 2015-11-14 19:43:28 +02:00
Meir Wahnon
271896540e Update README.md 2015-11-14 19:36:14 +02:00
Meir Wahnon
40d585d06c add video 2015-11-14 19:35:05 +02:00
Herman Slatman
20bfebb726 GRR Rapid Response added 2015-11-14 18:13:40 +01:00
Meir Wahnon
11b3ca17cb evolve update 2015-11-13 23:18:11 +02:00
Meir Wahnon
75604e50cf Update README.md 2015-11-13 23:17:07 +02:00
Meir Wahnon
7dcf68cf53 add All in one Tools 2015-11-13 23:13:59 +02:00
Meir Wahnon
ef66a82c26 add Process dump tools 2015-11-13 23:08:59 +02:00
Meir Wahnon
94b0259e36 add Memory Imaging Tools 2015-11-13 21:15:55 +02:00
Meir Wahnon
5a6fabdb3f Add memory Analysis Tools 2015-11-13 20:23:10 +02:00
Meir Wahnon
1cea169b7f Update README.md 2015-11-11 00:26:45 +02:00
Meir Wahnon
65d359b632 Update README 2015-11-11 00:13:26 +02:00
Meir Wahnon
dd88201463 Initial commit 2015-11-11 00:10:58 +02:00