#Dfir-automation

clong

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

wagga40

Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

securityjoes

MasterParser

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

Correia-jpv

fucking-awesome-incident-response

A curated list of tools for incident response. With repository stars⭐ and forks🍴

brootware

flarevm-up

Easy automated vagrant provisioning of Windows 10 with flarevm tools installed for Digital Forensics and Malware Analysis Lab.

idiom

activemime-format

ActiveMime File Format Documentation

BenjiTrapp

boxed-kali

Kali in a Box - Containerized and fully operational within your Browser