Sarkis Nanyan
fc56a63e03
add AVML memory acquisition tool
2020-07-22 18:40:34 +03:00
fabacab
a1a34dcf1e
Remove Mozilla Investigator (MIG), retired in favor of MozDef.
2020-06-18 14:24:46 -04:00
Meir Wahnon
4787e12d29
Merge pull request #148 from Karneades/patch-4
...
Add Invoke-LiveResponse to Windows live collection
2020-06-17 08:51:07 +03:00
Meir Wahnon
620b720813
Merge pull request #150 from Karneades/patch-2
...
Add artifactcollector to evidence collection
2020-06-17 08:50:28 +03:00
Meir Wahnon
abac9a3b57
Merge pull request #151 from stuhli/master
...
Add some tools
2020-06-17 08:49:34 +03:00
Meir Wahnon
52535d3210
Merge pull request #145 from Karneades/patch-1
...
Add PowerGRR API client as addition to GRR
2020-06-17 08:46:35 +03:00
Mathias Stuhlmacher
887dd7c188
Add some tools
2020-05-13 18:57:00 +02:00
Andreas Hunkeler
214a965de3
Add artifactcollector to evidence collection
2020-04-06 16:56:52 +02:00
Meir Wahnon
03bb3eacbb
Merge pull request #146 from Karneades/patch-2
...
Add PowerSponse as containment tool
2020-04-06 12:57:32 +03:00
Meir Wahnon
a5434d71e4
Merge pull request #147 from Karneades/patch-3
...
Add IRTriage Windows evidence collection tool
2020-04-06 12:53:48 +03:00
Andreas Hunkeler
92f687ae4c
Add CyLR to evidence collection
2020-04-06 11:42:12 +02:00
Andreas Hunkeler
a1a723cd8f
Add Invoke-LiveResponse to Windows live collection
2020-04-06 11:39:43 +02:00
Andreas Hunkeler
214ab6cb1f
Add IRTriage Windows evidence collection tool
2020-04-06 11:36:57 +02:00
Andreas Hunkeler
3a838c67ee
Add PowerSponse as containment tool
2020-04-06 11:33:34 +02:00
Andreas Hunkeler
075d3802af
Add PowerGRR API client as addition to GRR
2020-04-06 11:29:45 +02:00
Philip Tully
d1b2c47647
fixes formatting
2020-03-11 13:14:10 -04:00
Philip Tully
d72ca2cc60
Adds StringSifter
2020-03-11 13:11:37 -04:00
Meir Wahnon
0556ba2c58
update slack community link
2020-01-18 09:51:30 +02:00
Bart
fdef171a92
Update README.md
...
Add CAPE sandbox.
2019-11-03 14:07:12 +01:00
thefear100
0dc6f6b027
Update README.md
2019-10-31 12:55:35 -07:00
thefear100
6f1131cc0c
Update README.md
2019-10-31 12:55:12 -07:00
thefear100
0ca9d52209
Update README.md
2019-10-30 11:24:20 -07:00
Karol Trociński
2fdb66e00f
Update README.md
2019-10-26 10:07:40 +00:00
Karol Trociński
522e37f639
Add MalConfScan volatility plugin.
2019-10-26 10:00:23 +00:00
actualmermaid
e147176811
Update README.md
2019-10-17 11:38:36 -07:00
Herman Slatman
7cad62c65f
Add DFIR ORC
2019-09-24 10:51:24 +02:00
Bryan Bowie
18bc422371
Update README.md
...
Added in several new tools as well as removed Malwr as it is no longer available at this time.
2019-09-02 12:40:45 -04:00
Tony Phipps
174faaae58
Update README.md
2019-08-28 07:12:35 -04:00
Tony Phipps
7db1d4b1c0
Update README.md
2019-08-27 23:29:19 -04:00
Alexey Dolgikh
3945bce515
Update README.md
2019-06-03 09:53:54 +03:00
Alexey Dolgikh
e6817c1d19
Update README.md
...
Adds Kaspersky CyberTrace and Kaspersky Threat Intelligence Portal
2019-05-28 12:15:36 +03:00
Herman Slatman
1a4ab6dcf0
Fix errors after merge
2018-11-27 17:51:52 +01:00
Herman Slatman
045c36b3e9
Merge branch 'master' into hs_sysmon_search
2018-11-27 17:33:34 +01:00
Meitar M
c7366df265
Consistently use sentence casing, fix a typo, shorten verbose items.
...
This commit continues the work to conform to the Awesome List style
guidelines. In this commit, item descriptions have been checked to
ensure they use sentence casing (first letter of the description must be
capitalized), a typo ("forenisic" -> "forensic") was fixed, and several
overly long descriptions that read too much like marketing material were
shortened to a single sentence for simplicity.
2018-10-03 16:21:23 -04:00
Meitar M
6e4f1accca
Continued style guide conformance fixes.
...
This commit continues edits to make the list Awesome List conformant.
Specifically, this commit focuses on:
* Removing prepositions ("A," "An," "The," etc) from the start of items.
* Removing duplicated line item names from their descriptions.
* Expanding acronyms of line item names in the link itself.
Again, this is just one step in the process of making the list more
conformant to the Awesome List style guide and should not be considered
an exhaustive treatment.
2018-10-03 15:47:22 -04:00
Meitar M
c7dc47c239
Begin style conformance with new Awesome List guides.
...
The Awesome List style guide wants listed awesome lists to conform to a
particular style. Their style guide includes numerous items, some of
which are addressed by this commit. The items addressed herein include:
* Name of list as the top-level heading.
* Awesome badge placed to the right of the title, not underneath.
* Description of the list contents.
* All line items should end in appropriate punctuation (like a period).
This is a first pass and should not be considered an exhaustive
accounting of the style guide's recommendations.
2018-10-03 15:44:51 -04:00
Herman Slatman
a3d57c4271
Merge branch 'master' into hs_sysmon_search
2018-10-01 21:12:35 +02:00
Herman Slatman
cb5016d109
Add StreamAlert
2018-10-01 20:14:38 +02:00
Herman Slatman
2b404faf3d
Add SysmonSearch
2018-10-01 20:10:43 +02:00
CIRT Josh
e84f24cc69
Update README.md
2018-08-30 17:31:50 +01:00
CIRT Josh
1fcabb74c4
Merge pull request #1 from meirwah/master
...
Update
2018-08-30 17:28:40 +01:00
Meitar M
87ae91b21e
Add Scout2, an AWS assessment and (semi-)automated account hardening tool.
2018-08-22 14:00:32 -04:00
Meitar M
8433df3be6
Add Margarita Shotgun, a Python-based remote memory acquisition tool.
2018-08-22 14:00:12 -04:00
Herman Slatman
81805dfaeb
Add Diffy
2018-07-17 22:47:56 +02:00
Binalyze
4626070758
Update README.md
...
Added the word free.
2018-06-17 22:23:30 +03:00
Binalyze
866884f933
Update README.md
...
Added IREC into Windows Evidence Collection list.
2018-06-17 22:22:30 +03:00
Meir Wahnon
097454d7b8
Merge pull request #107 from hslatman/hs_adversary_emulation
...
Add Adversary Emulation section
2018-05-12 09:51:21 -07:00
nogoodconfig
6c38544120
Added PyaraScanner
2018-05-03 15:30:52 +01:00
nogoodconfig
c3320ee0d3
Added PyaraScanner
2018-05-03 15:30:01 +01:00
megan201296
52282a826c
Update README.md
...
Removed `s` in `https://augmentd.co/ `. augmentd only uses `http`
2018-04-24 17:01:30 -05:00
