Top #dfir Tools & Software

my-arsenal-of-aws-security-tools

github

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

awesome-incident-response

github

A curated list of tools for incident response

zeek

github

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

chainsaw

github

Rapidly Search and Hunt through Windows Forensic Artefacts

timesketch

github

Collaborative forensic timeline analysis

LogonTracer

github

Investigate malicious Windows logon by visualizing and analyzing Windows event log

hayabusa

github

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Digital-Forensics-Guide

github

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.