How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Toolset for research malware and Cobalt Strike beacons
BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Please read the initial JARM blog post for more information.
The main features of salesforce/jarm are: Forensics and Incident Response, Network Monitoring Tools, Detection Tools.
Open-source alternatives to salesforce/jarm include: ccob/beaconeye — BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon,… romanemelyanov/cobaltstrikeforensic — Toolset for research malware and Cobalt Strike beacons. velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… 3coresec/automata. accenture/docker-plaso. abdulrhmanalfaifi/fennec.