#Triage

Showing 12 of 12 repositories tagged #triage, ranked by stars

alexandreborges
alexandreborges
malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Score
100
โ˜… 3.9k โ‘‚ 535 +31/day
Python
tclahr
tclahr
uac

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

Score
88
โ˜… 1.4k โ‘‚ 191 +3/day
Shell
binref
binref
refinery

High Octane Triage Analysis

Score
75
โ˜… 859 โ‘‚ 80 โ€”
Python
TonyPhipps
TonyPhipps
SIEM

SIEM Tactics, Techiques, and Procedures

Score
62
โ˜… 720 โ‘‚ 114 โ€”
PowerShell
google
google
triage-party

๐ŸŽ‰ Triage Party: massively multi-player GitHub triage ๐ŸŽ‰

Score
0
โ˜… 534 โ‘‚ 85 +1/day
Go
TonyPhipps
TonyPhipps
Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Score
38
โ˜… 483 โ‘‚ 85 โ€”
PowerShell
rc0r
rc0r
afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

Score
25
โ˜… 418 โ‘‚ 63 โ€”
Python
ispras
ispras
casr

Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.

Score
50
โ˜… 355 โ‘‚ 36 โ€”
Rust
dssg
dssg
triage

General Purpose Risk Modeling and Prediction Toolkit for Policy and Social Good Problems

Score
0
โ˜… 199 โ‘‚ 62 โ€”
Jupyter Notebook
NotYuSheng
NotYuSheng
TracePcap

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).

Score
12
โ˜… 28 โ‘‚ 0 +1/day
TypeScript
dwmetz
dwmetz
Presentations

DFIR Presentations

Score
0
โ˜… 15 โ‘‚ 0 โ€”
owenshuo
owenshuo
open-bounty-radar

CLI radar for discovering and monitoring paid open-source issues and bounty opportunities

Score
0
โ˜… 1 โ‘‚ 0 โ€”
JavaScript
Related Topics
#security#threat-hunting#malware-analysis#dfir#forensics#soc#cybersecurity#malware#incident-response#analysis#baseline#blue

ยฉ 2026 GitRepoTrend ยท GitHub repositories by topic ยท Updated weekly