FastFinder
FastFinder is a lightweight tool designed for threat hunting, live forensics, and triage on both Windows and Linux platforms. It focuses on endpoint enumeration and suspicious file finding based on various criteria such as file path/name, checksums, string content match, and YARA rules. It has been tested in real cases in multiple CERT, CSIRT, and SOC use cases, with examples including real malwares and vulnerability scan examples. Compiled releases are available, but compiling from sources may be tricky due to dependencies on go-yara and CGO compilation.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Migrated Splunk SOAR Connectors to new GitHub organization for better organization and management.
A simple maturity model for enterprise detection and response
Open-source security automation platform for automating security alerts and building AI-assisted workflows.
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
AIL Framework is a modular system for analyzing and detecting information leaks from unstructured data sources, with capabilities for data extraction, correlation, and integration with threat intelligence platforms.
Malware allows attackers to execute Windows commands from a remote environment
PacBot is a platform for continuous compliance monitoring, compliance reporting, and security automation for the cloud, with a plugin-based data ingestion architecture.
CimSweep is a suite of CIM/WMI-based tools for incident response and hunting operations on Windows systems without the need to deploy an agent.
A set of scripts for collecting forensic data from Windows and Unix systems respecting the order of volatility.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.