Tooling and Software - DFIRVault

Tooling and Software

June 21, 2025

DFIR Case Manager

📁 DFIR Case Manager – Simple Case Workflow in a ClickManaging forensic case folders shouldn't be a chore. That’s why I built DFIR Case Manager, a no-frills batch utility that automates your case structure...

Tooling and Software

June 13, 2025

SpiderFoot Windows Quick Launcher

As a digital forensics and incident response (DFIR) professional, I'm always looking for ways to streamline my workflow. Today I'm sharing a simple but powerful utility I created: the SpiderFoot Quick Launcher - a batch script...

Incident Response, Threat Hunting, Tooling and Software

June 12, 2025

Splunk DFIR Dashboard Collection

Digital Forensics and Incident Response (DFIR) professionals know that speed and efficiency are critical during investigations. The Splunk DFIR Dashboard Collection is a treasure trove of ready-to-use Splunk dashboards designed to streamline forensic analysis and provide...

Threat Hunting, Tooling and Software

May 22, 2025

AI-Assisted Hunting: Ollama Meets ELK

When we work with a large amount of logs, sometimes millions or billions of events need to be parsed and queried to find the needle in the haystack. I've recently begun looking in to...

Cloud Forensics, Incident Response, Threat Hunting, Tooling and Software, Windows Forensics

May 21, 2025

ForensIQ

Introducing ForensIQ: AI-Powered Elasticsearch Log Analysis for Cybersecurity Investigations The Challenge of Modern Log Analysis As cybersecurity professionals, we know that logs are the lifeblood of incident response and threat hunting. But with the...

Cloud Forensics, Incident Response, Threat Hunting, Tooling and Software

May 21, 2025

CSV2ELK

Why I Built ThisAs a DFIR professional, I constantly deal with:CSV exports from SIEMs, firewalls, and malware analysis toolsTime wasted manually mapping fields to ElasticsearchCredential fatigue from repeated Elasticsearch loginsCSV2ELK v0.1 solves this with:✅ One-click ingestion of forensic data into...

Tooling and Software

April 7, 2025

Setting up logontracer daemon

Step 1 – Create Bash Script: Touch logontracer_run.sh Chmod +x logontracer_run.sh Nano logontracer_run.sh #!/bin/bash # Get the IPv4 address of eth0 IPV4_ADDRESS=$(ip -4 addr show eth0 | grep 'inet ' | awk '{print $2}'...

DFIR Case Manager

SpiderFoot Windows Quick Launcher

Splunk DFIR Dashboard Collection

AI-Assisted Hunting: Ollama Meets ELK

ForensIQ

CSV2ELK

Setting up logontracer daemon

Navigation

Categories