dwmetz Goto Github PK

awesome-kape

A curated list of KAPE-related resources

axiom-powershell

PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.

blue-jupyter

Jupyter Notebooks for the Blue Team

cyberpipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

detonare

Capture. Detonate. Collect

digital-forensics-with-kali-linux

Digital Forensics with Kali Linux, published by Packt

dwmetz.github.io

gcti

ginsu

Takes a larger image and 'chops' it down to <= 3GB zips to traverse Windows Defender for Endpoint

ileapp

iOS Logs, Events, And Plist Parser

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

magnet-response-powershell

PowerShell script for running Magnet RESPONSE forensic collection tool in large enterprises.

mal-hash

This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.

presentations

Archive of presentations shared with the DFIR community.

pshero

PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.

quickpcap

A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.

reversinglabs-yara-rules

ReversingLabs YARA Rules

rules

Repository of yara rules

sift

SIFT

toolbox

Miscellaneous scripts for public consumption that don't really need their own repository.

volatility3

Volatility 3.0 development