Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/opensourcesec/CIRTKit
Tools for the Computer Incident Response Team :computer:
https://github.com/opensourcesec/CIRTKit
carbonblack dfir malware-analysis python
Last synced: 13 days ago
JSON representation
Tools for the Computer Incident Response Team :computer:
- Host: GitHub
- URL: https://github.com/opensourcesec/CIRTKit
- Owner: opensourcesec
- License: mit
- Created: 2015-10-19T15:50:22.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2017-04-17T16:43:44.000Z (over 7 years ago)
- Last Synced: 2024-08-01T02:11:22.932Z (3 months ago)
- Topics: carbonblack, dfir, malware-analysis, python
- Language: Python
- Homepage:
- Size: 461 KB
- Stars: 141
- Watchers: 20
- Forks: 25
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-incident-response - CIRTkit - CIRTKit is not just a collection of tools, but also a framework to aid in the ongoing unification of Incident Response and Forensics investigation processes. (IR tools Collection / All in one Tools)
README
![CIRTKit](data/img/cirtkit_logo.png)
One DFIR console to rule them all. Built on top of the [Viper Framework](https://github.com/viper-framework/viper)
[![Build Status](https://travis-ci.org/byt3smith/CIRTKit.svg?branch=master)](https://travis-ci.org/byt3smith/CIRTKit)
## Documentation
* Please see the [wiki](https://github.com/byt3smith/CIRTKit/wiki) for more information about CIRTKit and documentation## Roadmap
### Future integrations
* Bit9
* Palo Alto Networks
* EnCase/FTK### Future modules
* Packet Analysis (possibly Dshell)
* Javascript Unpacking/Deobfuscation
* Volatility Memory Analysis Framework
* Hex Viewer/Editor### Scripting Framework
* Automation is key. Scripting is key to DFIR, thus needs to be available in CIRTKit