Outils pour forensics

Direct Memory Access attack toolkit.

OSINT framework for phone numbers.

Super-timelining for forensics.

Live PowerShell disk forensics.

Linux port of Sysinternals Procmon.

JavaScript deobfuscator.

Open SOC distribution.

Hunt usernames across social networks.

Vendor-agnostic detection rules.

Open-source IPS, next generation.

Find a profile across 1000+ networks.

Windows kernel + user-mode emulator.

High-performance IDS / IPS.

Microsoft's Sysmon, on Linux.

All-in-one honeypot platform.

Wireshark on the command line.

Filesystem forensics library.

Open-source SIRP for incident response.

Unix-like artifact collector.

Ultimate Packer for eXecutables.

Endpoint visibility and DFIR.

Memory forensics framework.

Open-source EDR for Windows.

Open-source XDR and SIEM.