IRCoreForensicFramework

Incident responder tool

Automates incident response actions to gather and process forensic artefacts from remote systems

Powershell / C# based cross platform forensic framework based for live incident response

GitHub

22 stars
5 watching
5 forks
Language: PowerShell
last commit: about 6 years ago

Related projects:

RepositoryDescriptionStars
davehull/kansaA modular incident response framework in Powershell1,565
ajmartel/irtriageAutomated incident response tool for collecting critical system information during forensic analysis of Windows systems.130
atc-project/atc-reactA knowledge base of actionable Incident Response techniques615
certsocietegenerale/irmOperational guidelines and best practices for handling various types of security incidents982
invoke-ir/powerforensicsA C#-based framework for analyzing and investigating hard drive forensic data1,389
cyberdefenseinstitute/cdirA tool designed to collect data from Windows systems during an incident response154
demisto/copsStandardized framework for creating and sharing incident response processes in a shared language151
tap-ir/tapirAn incident response framework with multi-user support, providing plugins for file analysis and a REST API for data access45
certsocietegenerale/firA cybersecurity incident management platform for tracking and managing security incidents in real-time.1,751
cisagov/untitledgoosetoolA tool for investigating and responding to security incidents in cloud-based Microsoft environments.917
dfir-iris/iris-webA collaborative platform for incident responders to share technical details during investigations1,091
pjrinaldi/wombatforensicsA multi-threaded GUI forensic analysis tool for Linux48
cyb3rfox/aurora-incident-responseTool designed to help incident responders track findings and tasks during investigations772
opensourcesec/cirtkitA comprehensive toolset for digital forensics and incident response analysis using Python142
securityjoes/forensicminerAutomates evidence collection and analysis from Windows machines using PowerShell.149