Home / Analysis / Carbonblack / CIRTKit / Incident Response / Information / Malware Analysis / Python / Viper / CIRTKit - Tools For The Computer Incident Response Team

CIRTKit - Tools For The Computer Incident Response Team

| Post sponsored by FaradaySEC | Multiuser Pentest Environment

One DFIR console to rule them all. Built on top of the Viper Framework

Documentation
  • Please see the wiki for more information about CIRTKit and documentation

Roadmap

Future integrations
  • Bit9
  • Palo Alto Networks
  • EnCase/FTK

Future modules
  • Packet Analysis (possibly Dshell)
  • Javascript Unpacking/Deobfuscation
  • Volatility Memory Analysis Framework
  • Hex Viewer/Editor

Scripting Framework
  • Automation is key. Scripting is key to DFIR, thus needs to be available in CIRTKit


CIRTKit - Tools For The Computer Incident Response Team CIRTKit - Tools For The Computer Incident Response Team Reviewed by Zion3R on 9:48 AM Rating: 5