528 Open source projects that are alternatives of or similar to EventTranscriptParser

Educational, CTF-styled labs for individuals interested in Memory Forensics

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.

Provides various Windows Server Active Directory (AD) security-focused reports.

An Incident Response tool to extract console command history and screen output buffer

Invoke-LiveResponse

A curated list of tools for incident response

Truehunter

Pre-connection attacks, gaining access & post-connection attacks on WEP, WPA & WPA2. 🛰✔️

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

Automation and Scaling of Digital Forensics Tools

PowerShell module for Office 365 and Azure log collection

Carve file metadata from NTFS index ($I30) attributes

Live system forensic collector

Python script to decode common encoded PowerShell scripts

Dumps all of the Key/Value pairs from a LevelDB database

Robot Hacking Manual (RHM). From robotics to cybersecurity. Papers, notes and writeups from a journey into robot cybersecurity.

macOS Artifact Parsing Tool

VirusTotal Wanna Be - Now with 100% more Hipster

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

#ThreatHunting #DFIR #Malware #Detection Mind Maps

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

Collaborative forensic timeline analysis

Event Trace Log file parser in pure Python

Everything related to Linux Forensics

Query and report user logons relations from MS Windows Security Events

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Minimalistic DNS logging tool

Automagically extract forensic timeline from volatile memory dump

No description or website provided.

Web browser forensics for Google Chrome/Chromium

📝 urlRecon - Info Gathering or Recon tool for Urls -> Retrieves * Whois information of the domain * DNS Details of the domain * Server Fingerprint * IP geolocation of the server

This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices

The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.

Python 3 Script to parse out iTunes backups

CDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library

System Management RAM analysis tool

incident response scripts

WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）

A tool for forensic file system reconstruction.

You didn't think I'd go and leave the blue team out, right?

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

Timeline of Active Directory changes with replication metadata

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Trace ScriptBlock execution for powershell v2

The official wrapper for spyse.com API, written in Go, aimed to help developers build their integrations with Spyse.

Tools for inspecting disk images

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

A multi-layered and multi-tiered Machine Learning security solution, it supports always on detection system, Django REST framework used, equipped with a web-browser extension that uses a REST API call.

Recover files from damaged BTRFS filesystems

The Simplistic Information Gathering Engine | Find Advanced Information on a Username, Website, Phone Number, etc.

🔑 Hash type identifier (CLI & lib)

Materials for a course based on the Practical Malware Analysis text by Andrew Honig and Michael Sikorski

Set of Yara rules for finding files using magics headers

Python Program to obfuscate URLs to make Phishing attacks more difficult to detect. Uses Active open redirect list and other URL obfuscation techniques.

A parser for Unified logging tracev3 files

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

An inventory of tools and resources about CyberSecurity that aims to help people to find everything related to CyberSecurity.

U-Net for fingerprint denoising

Know Your IP: Get location, blacklist status, shodan and censys results, and more.