All tags
Catalogue tag

#dfir

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

5 records
Tagged “dfir”Ranked by health index
PyPI
66Moderatehealth index
mentat-is/gulp
g(ULP) core backend and plugins
Python★ 67↓ 836/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
61Moderatehealth index
optimuslabs-io/grokpatrol
Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.
Go★ 12Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
crates.io
59Moderatehealth index
WithSecureLabs/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
Rust★ 3,600↓ 64/moJul 17, 2026
GPL-3.0Jul 17, 2026 · metrics 1.13.0
crates.io
57Moderatehealth index
SecurityRonin/forensicnomicon
DFIR artifact catalog (6,554 artifacts, LOL/LOFL binaries, abusable sites) plus the normalized report vocabulary the SecurityRonin analyzer fleet shares — offline Rust library + 4n6query CLI
Rust★ 4↓ 3,856/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
Go
49At riskhealth index
ridgelinecyberdefence/vanguard
Cross-platform incident response toolkit. 28 pre-built use cases in a single zero-install binary: triage, threat hunting, memory forensics, disk collection, remote operations, and Velociraptor management. Works air-gapped, with automated timeline generation.
Go · HTML★ 150Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0