Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Les fonctionnalités principales de accenture/docker-plaso sont : Forensics and Incident Response.
Les alternatives open-source à accenture/docker-plaso incluent : velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… abdulrhmanalfaifi/fennec. activecm/beaker. ahmedkhlief/apt-hunter — APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT… airbus-cert/winshark. 3coresec/automata.