FastFinder is a lightweight tool designed for threat hunting, live forensics, and triage on both Windows and Linux platforms. It focuses on endpoint enumeration and suspicious file finding based on various criteria such as file path/name, checksums, string content match, and YARA rules. It has been tested in real cases in multiple CERT, CSIRT, and SOC use cases, with examples including real malwares and vulnerability scan examples. Compiled releases are available, but compiling from sources may be tricky due to dependencies on go-yara and CGO compilation.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Cortex XSOAR is a comprehensive SOAR platform that automates and standardizes security processes for faster response times and increased team productivity.
Open-source security automation platform for automating security alerts and building AI-assisted workflows.
IRIS-SOAR is a Python-based modular SOAR platform that automates security incident response workflows and integrates with DFIR-IRIS for enhanced digital forensics operations.
Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.
A compilation of suggested tools for each component in a detection and response pipeline, with real-world examples, to design effective threat detection and response pipelines.
Incident response and case management solution for efficient incident response and management.
Shuffle is a platform for automating security workflows with confidence, offering templates, collaboration tools, and a large app library.
An open-source, drag-and-drop security workflow builder with integrated case management for automating security workflows and tackling alert fatigue.
JIMI is a flow-based orchestration automation platform that combines low-code and no-code capabilities for multi-team collaboration across IT, security, and development operations.