Collaborative forensic timeline analysis

Digital Forensics artifact repository

A framework for orchestrating forensic collection, processing and data export

Processes forensic artifacts to generate timelines using Plaso

DFIQ is a collection of investigative questions and the approaches for answering them

Parse YARA rules and operate over them more easily.

Python library to carry out DFIR analysis on the Cloud

Sigma rules to share with the community

Cross-platform Yara scanner written in Go