dfir-dd

All

12 repositories

kirby
Public
A script to parse several forensic artifacts of given windows (triage) images, using dissect
python cli forensics dfir digital-forensics dissect forensics-tools
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Aug 21, 2025Aug 21, 2025
dfir-scripts
Public
Shell
•
GNU General Public License v3.0
•1•0•2•0•Updated Jul 23, 2025Jul 23, 2025
nt-hive2
Public archive
Windows registry parser library build upon BinRead
Rust
•
GNU General Public License v3.0
•3•7•2•0•Updated Jul 21, 2025Jul 21, 2025
dfir-toolkit
Public archive
CLI tools for forensic investigation of Windows artifacts
rust cli forensics dfir rust-lang digital-forensics forensic-analysis digital-forensics-incident-response forensics-tools
Rust
•
GNU General Public License v3.0
•29•347•2•1•Updated Jul 21, 2025Jul 21, 2025
packer
Public
Packer Templates to build vagrant base boxes
Shell
•0•1•0•0•Updated May 23, 2025May 23, 2025
dionysos
Public
Scanner for certain IoCs
Rust
•
GNU General Public License v3.0
•2•11•1•0•Updated Jan 29, 2025Jan 29, 2025
pr
Public
Public relations stuff
0•0•0•0•Updated Jul 30, 2024Jul 30, 2024
dissect-triage
Public
Triage-Tools based on dissect
Python
•0•0•0•0•Updated May 31, 2024May 31, 2024
.github
Public
DFIR DD team site
0•0•0•0•Updated May 21, 2024May 21, 2024
incident-response-playbooks
Public
Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
Creative Commons Attribution Share Alike 4.0 International
•4•49•0•0•Updated Apr 25, 2024Apr 25, 2024
velociraptor-artifacts
Public
Custom Artifacts for Rapid7 Velociraptor Software
forensics rapid7 velociraptor
MIT License
•0•2•0•0•Updated Oct 27, 2023Oct 27, 2023
dfir-dd.github.io
Public
Website
JavaScript
•0•0•0•0•Updated Oct 4, 2023Oct 4, 2023