https://github.com/opensourcesec/CIRTKit

Tools for the Computer Incident Response Team :computer:
https://github.com/opensourcesec/CIRTKit

carbonblack dfir malware-analysis python

Last synced: 14 days ago
JSON representation

Tools for the Computer Incident Response Team :computer:

• Host: GitHub
• URL: https://github.com/opensourcesec/CIRTKit
• Owner: opensourcesec
• License: mit
• Created: 2015-10-19T15:50:22.000Z (about 9 years ago)
• Default Branch: master
• Last Pushed: 2017-04-17T16:43:44.000Z (over 7 years ago)
• Last Synced: 2024-08-01T02:11:22.932Z (3 months ago)
• Topics: carbonblack, dfir, malware-analysis, python
• Language: Python
• Homepage:
• Size: 461 KB
• Stars: 141
• Watchers: 20
• Forks: 25
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-incident-response - CIRTkit - CIRTKit is not just a collection of tools, but also a framework to aid in the ongoing unification of Incident Response and Forensics investigation processes. (IR tools Collection / All in one Tools)

README

        
![CIRTKit](data/img/cirtkit_logo.png)

One DFIR console to rule them all. Built on top of the [Viper Framework](https://github.com/viper-framework/viper)



[![Build Status](https://travis-ci.org/byt3smith/CIRTKit.svg?branch=master)](https://travis-ci.org/byt3smith/CIRTKit)

## Documentation

* Please see the [wiki](https://github.com/byt3smith/CIRTKit/wiki) for more information about CIRTKit and documentation

## Roadmap

### Future integrations

* Bit9

* Palo Alto Networks

* EnCase/FTK

### Future modules

* Packet Analysis (possibly Dshell)

* Javascript Unpacking/Deobfuscation

* Volatility Memory Analysis Framework

* Hex Viewer/Editor

### Scripting Framework

* Automation is key. Scripting is key to DFIR, thus needs to be available in CIRTKit