cugu / awesome-forensics Goto Github PK

There's a few additions to your list you might appreciate

Devon Ackerman's Definitive DFIR Compendium Project
https://docs.google.com/spreadsheets/d/1JY-iyw-LEuPCkBAdjorMJhmhGRusN95eLmejWcky7XU/edit#gid=0

http://DFIR.training
and my blog
thisweekin4n6.wordpress.com

Cheers!

Can I suggest

• Belkasoft Live RAM Capturer to the "Memory forensics" section
• Belkasoft Acquisition Tool to the "Imaging" section
• @belkasoft to the "Twitter" section

Please consider adding BelkaCTFs at https://belkasoft.com/ctf

https://github.com/stuhli/dfirtrack

Hello !
Can you please add this DFIR tool to the list ?
https://github.com/YosfanEilay/ForensicMiner

Thank you !

Another awesome list
https://github.com/v2-dev/awesome-social-engineering

Enjoy

Hey @cugu
To help people easily locate the ids
I can correct the alignment of the items in README.md
Kindly assign it to me.

https://github.com/dfir-iris/iris-web

Here is a collaborative plateform for Incidence Response that you could maybe include in one of the categories

Hi,

I created few projects recently that could be useful for wider community:

https://github.com/op7ic/unix_collector -> A live forensic collection script for UNIX-like systems.
https://github.com/op7ic/BlueTeam.Lab -> Blue Team detection lab created with Terraform and Ansible in Azure.
https://github.com/op7ic/LokiToWinEventLog -> A repository containing scripts which allow Loki to log to Windows Event Log.
https://github.com/op7ic/Pe-SieveToWinEventLog -> A repository containing scripts which allow pe-sieve to log to Windows Event Log.
https://github.com/op7ic/EDR-Testing-Script -> Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads