YARA rule metadata specification and validation utility / Spécification et validation pour les règles YARA

A default credential scanner.

Artificial Ignorance through Markov Chains.

Snabb: Simple and fast packet networking

Sequence alignment algorithms

Like uniq, but for logs.

ClamAV - Documentation is here: https://docs.clamav.net

100Gbps Intrusion Detection and Prevention System

Containerized packaging of Network Administration Visualized (using Docker Compose)

Distributed & real time digital forensics at the speed of the cloud

Platform Security Assessment Framework

Collection of forensics artifacts location for Mac OS X and iOS

Checks with NSRL RDS servers looking for for hash matches

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Loki - Simple IOC and YARA Scanner

Binary analysis and management framework

Python IOC Editor

analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multiple formats.

Automation and Scaling of Digital Forensics Tools

Toolkit for auditing "phone home" behavior on Mac OS X Yosemite.

SQL powered operating system instrumentation, monitoring, and analytics.

Python OpenIOC Editor

Sublime Malware Research Tool

APTnotes data

Various public documents, whitepapers and articles about APT campaigns

GRR Rapid Response: remote live forensics for incident response

Digital Forensics artifact repository

Collaborative forensic timeline analysis