How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Python library to carry out DFIR analysis on the Cloud
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.
Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
The main features of netflix-skunkworks/diffy are: Cloud Security, Incident Response Frameworks, Incident Response Tools.
Projects with overlapping indexed features include: threatresponse/margaritashotgun — Remote Memory Acquisition Tool. google/cloud-forensics-utils — Python library to carry out DFIR analysis on the Cloud. cisagov/untitledgoosetool — Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data… endgameinc/varna — Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL). andresriancho/enumerate-iam — Enumerate the permissions associated with AWS credential set. alfresco/prowler — Prowler is a multi-cloud security posture management platform and vulnerability scanner. It provides tools for…
