Diffy (DEPRECATED) Logo

Diffy (DEPRECATED)

0
Free
Visit Website

Diffy has been deprecated at Netflix. This software is no longer maintained or supported. Diffy is a digital forensics and incident response (DFIR) tool that was developed by Netflix's Security Intelligence and Response Team (SIRT). Diffy allows a forensic investigator to quickly scope a compromise across cloud instances during an incident, and triage those instances for followup actions. Diffy is currently focused on Linux instances running within Amazon Web Services (AWS), but owing to our plugin structure, could support multiple platforms and cloud providers. It's called "Diffy" because it helps a human investigator to identify the differences between instances, and because Alex pointed out that "The Difforensicator" was unnecessarily tricky. See Releases for recent changes. See our Read the Docs site for well-formatted documentation. Supported Technologies: AWS (AWS Systems Manager / SSM), Local osquery. Each technology has its own plugins for targeting, collection, and persistence. Features: Efficiently highlights outliers in security-relevant instance behavior. For example, you can use Diffy to tell you which of your instances are listening on an unexpected port.

FEATURES

ALTERNATIVES

Zenduty's platform provides real-time operational health monitoring and incident response orchestration to improve incident response times and build a solid on-call culture.

Universal hexadecimal editor for computer forensics, data recovery, and IT security.

A command-line utility for extracting human-readable text from binary files.

Open Backup Extractor is an open source program for extracting data from iPhone and iPad backups.

RegRippy is a modern Python 3 alternative to RegRipper for extracting data from Windows registry hives.

MFT and USN parser for direct extraction in filesystem timeline format with YARA rule support.

An extensible network forensic analysis framework with deep packet analysis and plugin support.

Belkasoft offers cybersecurity solutions, training, and tools for businesses, law enforcement, and academia.

CyberSecTools logoCyberSecTools

Explore the largest curated directory of cybersecurity tools and resources to enhance your security practices. Find the right solution for your domain.

Copyright © 2024 - All rights reserved