DFIR Links

A collection of references gathered over time, grouped by topic.

• https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
• https://github.com/Neo23x0
• https://github.com/google/grr
• https://github.com/meirwah/awesome-incident-response
• http://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.html
• https://github.com/gchq/CyberChef

• https://github.com/volatilityfoundation/volatility/wiki/Memory-Samples
• https://digital-forensics.sans.org/media/volatility-memory-forensics-cheat-sheet.pdf

• https://github.com/rshipp/awesome-malware-analysis
• https://github.com/Yara-Rules/rules
• https://remnux.org/
• https://thedfirreport.com/2020/10/18/ryuk-in-5-hours/
• https://evasions.checkpoint.com/

• https://github.com/orlikoski/CyLR/releases
• https://securityonionsolutions.com/
• https://cybersecurity.att.com/products/ossim
• https://wazuh.com/

• https://www.netresec.com/?page=PcapFiles
• https://gchq.github.io/CyberChef/
• https://stegtool.net/