diffy
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
AI summary
Host analyzer
An incident response tool that helps digital forensics teams analyze and prioritize suspicious hosts in cloud environments
- stars
- 635
- forks
- 59
- watching
- 144
- awesome lists
- 2
Similar projects
Found by comparing what the projects do, not just their names.
Forensic analysis toolset
A digital forensics framework that provides tools and parsers to analyze forensic artefacts from various disk and file formats.
Response diff tool
A Java application that displays differences between two responses using color-coded formatting.
Forensic scanner
A tool for comprehensively collecting host forensic data during incident response and analysis.
Network analyzer
Tools and resources for network monitoring and analysis used in the SANS SEC503 course
File scanner
Tools for detecting suspicious files and directories on Windows and Linux endpoints.
Malware analyzer
Tool to analyze files during malware analysis and triage by extracting properties and detecting malicious indicators.
Malware analyzer
Tools for analyzing and comparing malware at a function level using fuzzy hashing algorithms
Forensic analyzer
A digital forensics tool for analyzing macOS and iOS systems
Forensic analysis toolkit
A Python-based collection of tools for gathering forensic information from Office documents
Malware analyzer
Analyzes and captures malware traffic on Linux sandboxed environments using QEMU hypervisor and various CPU architectures.
Investigation Platform
An investigation platform for parsing and analyzing digital evidence, streamlining workflows and improving collaboration.
Malware analyzer
Automates malware analysis workflow by extracting features and indicators of compromise from malicious files using various tools and libraries.
Data extractor
Provides a programming API and command line tools to access various data sources inside disk images or file collections.
Filesystem parser
A Dissect module implementing a parser for the XFS file system, commonly used by RedHat Linux distributions.
Evidence collector
Automates evidence collection and analysis from Windows machines using PowerShell.
Featured in 2 awesome lists
Each link jumps to the spot where the list mentions diffy.
