DFIR - DFIRVault

Tooling and Software

June 21, 2025

DFIR Case Manager

📁 DFIR Case Manager – Simple Case Workflow in a ClickManaging forensic case folders shouldn't be a chore. That’s why I built DFIR Case Manager, a no-frills batch utility that automates your case structure...

Threat Hunting, Tooling and Software

May 22, 2025

AI-Assisted Hunting: Ollama Meets ELK

When we work with a large amount of logs, sometimes millions or billions of events need to be parsed and queried to find the needle in the haystack. I've recently begun looking in to...

Cloud Forensics, Incident Response, Threat Hunting, Tooling and Software

May 21, 2025

CSV2ELK

Why I Built ThisAs a DFIR professional, I constantly deal with:CSV exports from SIEMs, firewalls, and malware analysis toolsTime wasted manually mapping fields to ElasticsearchCredential fatigue from repeated Elasticsearch loginsCSV2ELK v0.1 solves this with:✅ One-click ingestion of forensic data into...

Tooling and Software

April 7, 2025

DFIR ELK Setup Guide

The following is a step-by-step guide on setting up a DFIR ELK instance on Windows. Step 1: Prerequisites Before installation, ensure: Windows 10/11 or Windows Server 2016+ (64-bit) Java JDK 17 (Required for Elasticsearch & Logstash)...

DFIR Case Manager

AI-Assisted Hunting: Ollama Meets ELK

CSV2ELK

DFIR ELK Setup Guide

Navigation

Categories