
IRTriage
Incident Response Triage - Windows Evidence Collection for Forensic Analysis

Incident Response Triage - Windows Evidence Collection for Forensic Analysis

A curated list of CTF frameworks, libraries, resources and softwares



An advanced memory forensics framework

Curated catalog of 364 Android pentesting and security APKs organized by category, covering forensics, MITM, sniffing, OSINT, wireless, and privacy…

Some setup scripts for security research tools.

Curated vulnerability writeups with full technical analysis, proof-of-concept scripts, IOC listings, and remediation guidance for real-world software…

IoCs and detection rules for the Notepad++ supply chain attack (CVE-2025-15556) — Lotus Blossom APT, June–December 2025. Includes Falcon LogScale…

Proof-of-concept Velociraptor artifacts pack to showcase a remote Veeam forensics pipeline.

A centralized and enhanced memory analysis platform

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Automated, Collection, and Enrichment Platform

Python CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Incident Response collection and processing scripts with automated reporting scripts

Windows EDR with Gene-based detection engine, real-time artifact collection, Sysmon integration, and REST API for managing endpoints, rules, and…