Archived
mig
mozilla/migDistributed & real time digital forensics at the speed of the cloud
disk-forensicsmemory-forensicsvulnerability-analysis+6
1.2k
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
snovvcrash/usbripTracking history of USB events on GNU/Linux
dropbox/securitybotDistributed alerting for the masses!
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
grapl-security/graplGraph platform for Detection and Response
mandiant/mandiant-azure-ad-investigator
blackhillsinfosec/eventloggingAutomation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
intezer/linux-explorerEasy-to-use live forensics toolbox for Linux endpoints
tnich/honsshHonSSH is designed to log all SSH communications between a client and server.
dfir-dd/dfir-toolkitCLI tools for forensic investigation of Windows artifacts
alb-uss/secmonSECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface.
0x4d31/salt-scannerLinux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration
megamansec/ldap-monitoring-watchdogLDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…
linux-audit/audit-kernelGitHub mirror of the Linux Kernel's audit repository
