Ansible role to setup MIG aka Mozilla InvestiGator: postgresql server

DFIR Live-Response scripts

Basic rapid linux IR bash script

macos osquery

Ansible role to setup MIG aka Mozilla InvestiGator: build agents packages

Ansible role to setup MIG aka Mozilla InvestiGator - RabbitMQ server

LynX: Linux System Examination, the ultimate incident response emergency tool. It detects vulnerabilities across 13 categories, including configuration, network, and services, while also identifying malware, rootkits, SSH threats, mining attacks, and more.

ubuntu osquery

AWS Security Best Practices Assessment, Auditing, Hardening and Forensics Readiness Tool. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark and additional checks. Official CIS for AWS guide: https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf

Mac PenTesting & Digital Forensics Collection

Este script recompilará una gran parte de la información que se suele obtener de un sistema Linux ante un peritaje o análisis forense. Además toda la información será firmada con SHA256.

osquery fleet management suite

Script to automate Linux logs & artifacts collection

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Send files for analysis in Cuckoo Sandbox from context menu

Emperor is a bash script that collects extensive data from almost all Linux distros to help DFIR professionals triage cyber incidents.

TriageX - Linux Triage Tool Is a BASH shell script designed to collect evidences in an incident with Linux machines. The script uses native Linux commands to run.

Property List Timestamp Parser 4 forensics && fun.

Incident Forensic Response In Terminal script for linux

Extract SHA1 from Reference Data Set (RDS) provided by the National Software Reference Library (NSRL) for X-Ways Forensics (or any other tool that uses SHA1).