RELY vs APT-Hunter

RELY

RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices. (by yassirlaaouissi)

Source Code

Suggest alternative

Edit details

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity (by ahmedkhlief)

threat-hunting purpleteam Python3 windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs

Source Code

shells.systems

Suggest alternative

Edit details

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

RELY		APT-Hunter
	Project
1	Mentions	4
2	Stars	1,144
-	Growth	-
0.0	Activity	4.7
almost 3 years ago	Latest Commit	about 1 month ago
Python	Language	Python
-	License	GNU General Public License v3.0 only

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

RELY

Posts with mentions or reviews of RELY. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-04-05.

Made a nice OSCP enum tool
2 projects | /r/oscp | 5 Apr 2021

Thanks for the tip, I've already made a small triage tool for windows forensics as part of a school project https://github.com/yassirlaaouissi/RELY

APT-Hunter

Posts with mentions or reviews of APT-Hunter. We have used some of these posts to build our list of alternatives and similar projects.

APT-Hunter: APT-Hunter is Threat Hunting tool for Windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
1 project | /r/blueteamsec | 7 May 2023
ahmedkhlief/APT-Hunter: Threat Hunting tool for windows event logs
1 project | /r/blueteamsec | 12 Feb 2023
ahmedkhlief/APT-Hunter - APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
1 project | /r/GithubSecurityTools | 28 Sep 2021
Release: APT-Hunter V1.1 Stable
1 project | /r/blueteamsec | 27 Mar 2021

What are some alternatives?

When comparing RELY and APT-Hunter you can also consider the following projects:

RecuperaBit - A tool for forensic file system reconstruction.

mediator - An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

kobackupdec - Huawei backup decryptor

evtx-hunter - evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

hashlookup-forensic-analyser - Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/

hindsight - Web browser forensics for Google Chrome/Chromium

GoodHound - Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

TheHiveDocs - Documentation of TheHive

forensicsim - A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and reactions from a Microsoft Teams IndexedDB LevelDB database.

INDXRipper - Carve file metadata from NTFS index ($I30) attributes