PyRank

Dfir Automation Python Packages

Python packages with the GitHub topic dfir-automation. Sorted by relevance, with stars and monthly downloads.
cert-edf
edf-plasma-dissectors

Extract and normalize information from forensics artifacts

510 5 3
cert-edf
edf-plasma-core

Extract and normalize information from forensics artifacts

500 5 3
cert-edf
edf-plasma-cli

EDF Plasma CLI

443 5 3
cert-edf
generaptor

A generator for Velociraptor-based offline collectors

288 16 4
x746b
mem-forensics-mcp

Unified Memory Forensics MCP Server - Multi-tier engine combining Rust speed with Vol3 coverage.

256 4 0
pyperanger
crowdstrike-client

A Non-oficial crowdstrike client API

231 0 0
cert-edf
edf-helium-server

EDF Helium Server

203 1 2
cert-edf
edf-helium-client

EDF Helium Client

200 1 2
cert-edf
edf-helium-core

EDF Helium Core

200 1 2
cert-edf
edf-carbon-server

EDF Carbon Server

169 2 2
cado-security
varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

167 254 14
cert-edf
edf-carbon-core

EDF Carbon Core Library

167 2 2
cert-edf
edf-carbon-client

EDF Carbon Client

166 2 2
cert-edf
edf-neon-server

EDF Neon Server

156 1 2
cert-edf
edf-neon-core

EDF Neon Core

151 1 2
cert-edf
edf-iron-server

Unified cases, seamless integrations

147 1 2
cert-edf
edf-iron-core

EDF Iron Core

147 1 2
cert-edf
edf-neon-client

EDF Neon Client

135 1 2
cert-edf
edf-iron-client

Iron Client

135 1 2
cert-edf
edf-iron-x-iris

EDF Iron x DFIR IRIS Proxy

127 1 2
bonifield
urlbreakdown

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis

78 1 0
cert-edf
edf-fossil

A post-mortem analysis tool for raw disk/partition images

59 0 1