https://github.com/google/grr

GRR Rapid Response: remote live forensics for incident response
https://github.com/google/grr

Last synced: 3 days ago
JSON representation

GRR Rapid Response: remote live forensics for incident response

• Host: GitHub
• URL: https://github.com/google/grr
• Owner: google
• License: apache-2.0
• Created: 2013-12-04T00:17:53.000Z (about 11 years ago)
• Default Branch: master
• Last Pushed: 2024-09-26T09:25:55.000Z (3 months ago)
• Last Synced: 2024-10-29T11:33:22.341Z (about 1 month ago)
• Language: Python
• Homepage: https://grr-doc.readthedocs.io/
• Size: 160 MB
• Stars: 4,769
• Watchers: 315
• Forks: 764
• Open Issues: 175
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE
  • Authors: AUTHORS

Awesome Lists containing this project

• awesome-incident-response - GRR Rapid Response - Incident response framework focused on remote live forensics. It consists of a python agent (client) that is installed on target systems, and a python server infrastructure that can manage and talk to the agent. (IR tools Collection / All in one Tools)
• awesome-python-applications - Repo - doc.readthedocs.io/en/latest)) Server-agent system focused on remote live forensics for quick, browser-based triage and analysis of attacks on fleets of machines, with agent support for Linux, Windows, and OS X. `(server, corp)` (<a id="tag-dev" href="#tag-dev">Dev</a> / <a id="tag-dev.security" href="#tag-dev.security">Security</a>)
• awesome-incident-response - GRR Rapid Response - Incident response framework focused on remote live forensics. It consists of a python agent (client) that is installed on target systems, and a python server infrastructure that can manage and talk to the agent. Besides the included Python API client, [PowerGRR](https://github.com/swisscom/PowerGRR) provides an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting. (IR Tools Collection / All-In-One Tools)
• awesome-rainmana - google/grr - GRR Rapid Response: remote live forensics for incident response (Python)
• awesome-repositories - google/grr - GRR Rapid Response: remote live forensics for incident response (Python)
• ForensicsTools - grr - GRR Rapid Response: remote live forensics for incident response (Challenges / Live forensics)
• awesome-forensics - grr - GRR Rapid Response: remote live forensics for incident response (Tools / Live Forensics)
• fucking-awesome-incident-response - GRR Rapid Response - Incident response framework focused on remote live forensics. It consists of a python agent (client) that is installed on target systems, and a python server infrastructure that can manage and talk to the agent. Besides the included Python API client, <b><code>&nbsp;&nbsp;&nbsp;&nbsp;56⭐</code></b> <b><code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;7🍴</code></b> [PowerGRR](https://github.com/swisscom/PowerGRR)) provides an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting. (IR Tools Collection / All-In-One Tools)
• awesome-python-applications - Repo - doc.readthedocs.io/en/latest)) Server-agent system focused on remote live forensics for quick, browser-based triage and analysis of attacks on fleets of machines, with agent support for Linux, Windows, and OS X. `(server, corp)` (<a id="tag-dev" href="#tag-dev">Dev</a> / <a id="tag-dev.security" href="#tag-dev.security">Security</a>)
• Awesome-Forensics - grr - GRR Rapid Response: remote live forensics for incident response (Tools / Live Forensics)

README

        






GRR Rapid Response is an incident response framework focused on remote live forensics.

[![Build](https://github.com/google/grr/actions/workflows/build.yml/badge.svg?branch=master)](https://github.com/google/grr/actions/workflows/build.yml)

GRR is a python client (agent) that is installed on target systems, and

python server infrastructure that can manage and talk to clients.


Documentation

-------------

Please visit our [documentation website](https://grr-doc.readthedocs.io/) if you want to know more about GRR.

Contact Us

----------

* GitHub issues: [github.com/google/grr/issues](https://github.com/google/grr/issues)

* GRR Users mailing list: [grr-users](https://groups.google.com/forum/#!forum/grr-users)

* Follow us [on twitter](https://twitter.com/grrresponse) for announcements of GRR user meetups. We use [a gitter chat room](https://gitter.im/google/grr) during meetups.

Screenshots

-----------

[](https://github.com/google/grr/blob/gh-pages/screenshots/endpoint-overview.png)

[](https://github.com/google/grr/blob/gh-pages/screenshots/filesystem-overview.png)

[](https://github.com/google/grr/blob/gh-pages/screenshots/workflow-results.png)