beagle vs dfir-orc

Our great sponsors

InfluxDB - Power Real-Time Data Analytics at Scale

WorkOS - The modern identity platform for B2B SaaS

SaaSHub - Software Alternatives and Reviews

Our great sponsors

beagle		dfir-orc
	Project
1	Mentions	1
1,250	Stars	356
-	Growth	2.2%
0.0	Activity	8.9
over 1 year ago	Latest Commit	3 months ago
Python	Language	C++
MIT License	License	GNU Lesser General Public License v3.0 only

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

beagle

Posts with mentions or reviews of beagle. We have used some of these posts to build our list of alternatives and similar projects.

yampelo/beagle - Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
1 project | /r/GithubSecurityTools | 30 Jun 2021

dfir-orc

Posts with mentions or reviews of dfir-orc. We have used some of these posts to build our list of alternatives and similar projects.

Standard artifact gathering script
1 project | /r/crowdstrike | 30 Jul 2021

Looks great! Will dig into that. It looks like French ANSSI's DFIR-ORC. Maybe a good solution.

What are some alternatives?

When comparing beagle and dfir-orc you can also consider the following projects:

evtx-hunter - evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

TheHive - TheHive: a Scalable, Open Source and Free Security Incident Response Platform

dfirtrack - DFIRTrack - The Incident Response Tracking Application

awesome-incident-response - A curated list of tools for incident response

timesketch - Collaborative forensic timeline analysis

tenzir - Open source security data pipelines.

Kuiper - Digital Forensics Investigation Platform

Cortex - Cortex: a Powerful Observable Analysis and Active Response Engine

RELY - RELY (Name composed on project members Romy, Esther, Lucille and Yassir) is a python tool developed to help a Digital Forensics Triage procedure on some Microsoft Windows devices.

vast - VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

AzureHunter - A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

IntelOwl - IntelOwl: manage your Threat Intelligence at scale