Skip to content

@dfir-dd dfir-dd

Change the repository type filter

All

    Repositories list

    12 repositories

    • kirby

      Public
      A script to parse several forensic artifacts of given windows (triage) images, using dissect
      pythoncliforensics
      pythoncliforensicsdfirdigital-forensicsdissectforensics-tools
      Python
      •
      GNU General Public License v3.0
      •0•2•0•0•Updated Feb 5, 2026Feb 5, 2026

    • dfir-scripts

      Public
      Shell
      •
      GNU General Public License v3.0
      •1•0•2•0•Updated Oct 1, 2025Oct 1, 2025

    • nt-hive2

      Public archive
      Windows registry parser library build upon BinRead
      Rust
      •
      GNU General Public License v3.0
      •4•7•2•0•Updated Jul 21, 2025Jul 21, 2025

    • dfir-toolkit

      Public archive
      CLI tools for forensic investigation of Windows artifacts
      rustcliforensics
      rustcliforensicsdfirrust-langdigital-forensicsforensic-analysisdigital-forensics-incident-responseforensics-tools
      Rust
      •
      GNU General Public License v3.0
      •29•354•2•1•Updated Jul 21, 2025Jul 21, 2025

    • packer

      Public
      Packer Templates to build vagrant base boxes
      Shell
      •0•1•0•0•Updated May 23, 2025May 23, 2025

    • dionysos

      Public
      Scanner for certain IoCs
      Rust
      •
      GNU General Public License v3.0
      •2•11•1•0•Updated Jan 29, 2025Jan 29, 2025

    • pr

      Public
      Public relations stuff
      0•0•0•0•Updated Jul 30, 2024Jul 30, 2024

    • dissect-triage

      Public
      Triage-Tools based on dissect
      Python
      •0•1•0•0•Updated May 31, 2024May 31, 2024

    • .github

      Public
      DFIR DD team site
      0•0•0•0•Updated May 21, 2024May 21, 2024

    • incident-response-playbooks

      Public
      Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
      Creative Commons Attribution Share Alike 4.0 International
      •4•52•0•0•Updated Apr 25, 2024Apr 25, 2024

    • velociraptor-artifacts

      Public
      Custom Artifacts for Rapid7 Velociraptor Software
      forensicsrapid7velociraptor
      forensicsrapid7velociraptor
      MIT License
      •0•2•0•0•Updated Oct 27, 2023Oct 27, 2023

    • dfir-dd.github.io

      Public
      Website
      JavaScript
      •0•0•0•0•Updated Oct 4, 2023Oct 4, 2023
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.