dfir-orc vs beagle

dfir-orc

Forensics artefact collection tool for systems running Microsoft Windows (by DFIR-ORC)

Source Code

dfir-orc.github.io

Suggest alternative

Edit details

beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs. (by yampelo)

Security digital-forensics incident-response Graph Dfir forensic-analysis threat-hunting

Source Code

Suggest alternative

Edit details

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

dfir-orc		beagle
	Project
1	Mentions	1
356	Stars	1,250
2.2%	Growth	-
8.9	Activity	0.0
3 months ago	Latest Commit	over 1 year ago
C++	Language	Python
GNU Lesser General Public License v3.0 only	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

dfir-orc

Posts with mentions or reviews of dfir-orc. We have used some of these posts to build our list of alternatives and similar projects.

Standard artifact gathering script
1 project | /r/crowdstrike | 30 Jul 2021

Looks great! Will dig into that. It looks like French ANSSI's DFIR-ORC. Maybe a good solution.

beagle

Posts with mentions or reviews of beagle. We have used some of these posts to build our list of alternatives and similar projects.

yampelo/beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
1 project | /r/GithubSecurityTools | 30 Jun 2021

What are some alternatives?

When comparing dfir-orc and beagle you can also consider the following projects:

TheHive - TheHive: a Scalable, Open Source and Free Security Incident Response Platform

evtx-hunter - evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

awesome-incident-response - A curated list of tools for incident response

dfirtrack - DFIRTrack - The Incident Response Tracking Application

tenzir - Open source security data pipelines.

timesketch - Collaborative forensic timeline analysis

Cortex - Cortex: a Powerful Observable Analysis and Active Response Engine

Kuiper - Digital Forensics Investigation Platform

vast - VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.

AzureHunter - A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

IntelOwl - IntelOwl: manage your Threat Intelligence at scale