sf

DFIRTrack (Digital Forensics as well as Incident Response Tracking application) is an opened upwards source spider web application mainly based on Django using a PostgreSQL database backend. In contrast to other slap-up incident reply tools, which are mainly case-based as well as back upwards the piece of occupation of CERTs, SOCs etc. inwards their daily business, DFIRTrack is focused on treatment 1 major incident alongside a lot of affected systems every bit it is oftentimes observed inwards APT cases. It is meant to endure used every bit a tool for dedicated incident reply teams inwards large cases. So, of course, CERTs as well as SOCs may utilisation DFIRTrack every bit well, but they may experience it volition endure to a greater extent than appropriate inwards special cases instead of every twenty-four hr menstruum work. In contrast to case-based applications, DFIRTrack industrial plant inwards a system-based fashion. It keeps rail of the condition of diverse systems...

Turbinia is an open-source framework for deploying, managing, as well as running distributed forensic workloads. It is intended to automate running of mutual forensic processing tools (i.e. Plaso, TSK, strings, etc) to attention amongst processing evidence inwards the Cloud, scaling the processing of large amounts of evidence, as well as decreasing reply fourth dimension yesteryear parallelizing processing where possible. How it works Turbinia is composed of dissimilar components for the client, server as well as the workers. These components tin dismiss live on run inwards the Cloud, on local machines, or as a hybrid of both. The Turbinia customer makes requests to procedure evidence to the Turbinia server. The Turbinia server creates logical jobs from these incoming user requests, which creates as well as schedules forensic processing tasks to live on run yesteryear the workers. The evidence to live on processed volition live on dissever upwards yesteryear the jobs when ...

An OSINT tool that analyzes metadata in addition to creates dynamic reports" What is "metadata"? To pose it simply, metadata is precisely information almost data. The information comes from the tags that capture valuable information almost each specific file. Each file has tin convey many unlike tags of information that tin live on retreived for multiple purposes. The uses for metadata are endless in addition to tin show valuable to those inwards the information safety fields for pentesting in addition to gathering information, similar who created the file in addition to what software was used to edit it. Metaforge Checklist Must convey a Unix-based Operating System (Arch, Debian, in addition to RHEL Linux distros convey been tested in addition to also Mac OSX) Must convey at to the lowest degree Python3.5 or higher Must house all information yous wishing to analyze inwards the /media directory. Cannot house folders inside the /media directory. Senior...

FFM is a hacking harness that y'all tin occupation during the post-exploitation stage of a red-teaming engagement. The see of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 as well as the accompanying slide deck is available at this url . If you're non familiar amongst this flat of tools, it is strongly advised to conduct maintain a seem at them to empathise what a hacking harness' role is. All the comments are included inwards the slides. Usage The goal of a hacking harness is to deed equally a helper that automates mutual tasks during the post-exploitation phase, but also safeguards the user against mistakes they may make. It is an instrumentation of the shell. Run ./ffm.py to activate it as well as y'all tin start working immediately. There are 2 commands y'all demand to know about: Type !list to display the commands provided past times the harness. Type SHIFT+TAB to perform tab completion on the loca...

PcapXray is a Network Forensics Tool  To visualize a Packet Capture offline equally a Network Diagram including device identification, highlight of import communication too file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts inwards the network, network traffic, highlight of import traffic too Tor traffic equally good equally potential malicious traffic including information involved inwards the communication. Problem: Investigation of a Pcap file takes a long fourth dimension given initial glitch to commencement the investigation Faced past times every forensics investigator too anyone who is analyzing the network Location: https://github.com/Srinivas11789/PcapXray Solution: Speed upwards the investigation process Make a network diagram amongst the next features from a Pcap file Tool Highlights: Network Diagram – Summary Network Diagram of amount network Information: Web Traffic amon...