A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
-
Updated
Jan 12, 2026 - Python
#
dfir
Here are 323 public repositories matching this topic...
IntelOwl: manage your Threat Intelligence at scale
python ioc enrichment osint incident-response dfir cybersecurity threat-hunting malware-analyzer malware-analysis threatintel cyber-security hacktoberfest security-tools threat-intelligence honeynet cyber-threat-intelligence osint-python threathunting intel-owl
-
Updated
Feb 10, 2026 - Python
Investigate malicious Windows logon by visualizing and analyzing Windows event log
-
Updated
Oct 19, 2025 - Python
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
security osint alerting forensics dfir intrusion-detection siem digital-forensics offensive-security cyber-security network-security port-scanning forensic-analysis threat-intelligence mitre-attack forensics-investigations detection-engineering digitalforensics forensics-tools digitalforensicreadiness
-
Updated
Jan 4, 2024 - Python
Your Everyday Threat Intelligence
-
Updated
Jan 26, 2026 - Python
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
security azure sentinel dfir cybersecurity infosec threat-hunting misp vulnerability-management mde blueteam mdi zero-day kql defender-for-endpoint
-
Updated
Feb 10, 2026 - Python
Browser forensics tool for Google Chrome (and other Chromium-based browsers)
-
Updated
Feb 3, 2026 - Python
Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
-
Updated
Dec 13, 2022 - Python
Malcom - Malware Communications Analyzer
-
Updated
Nov 29, 2017 - Python
A DFIR tool written in Python.
-
Updated
Jun 9, 2021 - Python
A collection of resources for Threat Hunters
-
Updated
Oct 15, 2024 - Python
Extract and aggregate threat intelligence.
ioc osint dfir threat-hunting malware-research misp threat-sharing threatintel yara threat-analysis fraud-detection intelligence-gathering security-tools threat-intelligence soar indicators-of-compromise threat-feeds threat-intelligence-platform
-
Updated
Jan 31, 2024 - Python
Automation and Scaling of Digital Forensics Tools
-
Updated
Jan 15, 2026 - Python
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
-
Updated
Feb 11, 2026 - Python
A knowledge base of actionable Incident Response techniques
-
Updated
May 31, 2022 - Python
A little tool to play with Azure Identity - Azure and Entra ID lab creation tool. Blog: https://medium.com/@iknowjason/sentinel-for-purple-teaming-183b7df7a2f4
-
Updated
Mar 21, 2025 - Python
Improve this page
Add a description, image, and links to the dfir topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dfir topic, visit your repo's landing page and select "manage topics."