A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
-
Updated
Feb 15, 2024 - Python
#
dfir
Here are 229 public repositories matching this topic...
IntelOwl: manage your Threat Intelligence at scale
python ioc enrichment osint incident-response dfir cybersecurity threat-hunting malware-analyzer malware-analysis threatintel cyber-security hacktoberfest security-tools threat-intelligence honeynet cyber-threat-intelligence osint-python threathunting intel-owl
-
Updated
Apr 23, 2025 - Python
Investigate malicious Windows logon by visualizing and analyzing Windows event log
-
Updated
Jun 21, 2024 - Python
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
security osint alerting forensics dfir intrusion-detection siem digital-forensics offensive-security cyber-security network-security port-scanning forensic-analysis threat-intelligence mitre-attack forensics-investigations detection-engineering digitalforensics forensics-tools digitalforensicreadiness
-
Updated
Jan 4, 2024 - Python
Your Everyday Threat Intelligence
-
Updated
Apr 19, 2025 - Python
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
security azure sentinel dfir cybersecurity infosec threat-hunting misp vulnerability-management mde blueteam mdi zero-day kql defender-for-endpoint
-
Updated
Apr 23, 2025 - Python
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
-
Updated
Dec 13, 2022 - Python
Web browser forensics for Google Chrome/Chromium
-
Updated
Apr 12, 2025 - Python
Malcom - Malware Communications Analyzer
-
Updated
Nov 29, 2017 - Python
A DFIR tool written in Python.
-
Updated
Jun 9, 2021 - Python
A collection of resources for Threat Hunters
-
Updated
Oct 15, 2024 - Python
Extract and aggregate threat intelligence.
ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform
-
Updated
Jan 31, 2024 - Python
Automation and Scaling of Digital Forensics Tools
-
Updated
Mar 6, 2025 - Python
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
-
Updated
Apr 25, 2025 - Python
A knowledge base of actionable Incident Response techniques
-
Updated
May 31, 2022 - Python
Warning lists to inform users of MISP about potential false-positives or other information in indicators
-
Updated
Apr 4, 2025 - Python
Improve this page
Add a description, image, and links to the dfir topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dfir topic, visit your repo's landing page and select "manage topics."