├── README.md ├── reference tuts └── reference.txt ├── referenct tuts(sites) ├── tech ├── linux │ └── linux_tech.txt ├── mac │ └── mac_tech.txt ├── readme.txt └── windows │ └── win_tech.txt └── tool └── tool_list.txt /README.md: -------------------------------------------------------------------------------- 1 | # Incident-Response-Collections https://www.sec-wiki.com 2 | This repository mainly different resources for incident response: tools, online website(for example DNS lookup site), related tech article(for example some forensic tips), some tuts for reference 3 | 本项目包括应急响应涉及的各方面的资源：工具、在线网址(主要是信息辅助类网址，如dns信息查询网址)，相关的一些技术文章（会涉及取证相关的文章），以及一些参考手册 4 | 5 | 说明：目前来看，本项目会进行长期维护，有修改的建议或者想法欢迎联系作者。 6 | 7 | 免责说明 8 | 请勿用于非法的用途，否则造成的严重后果与本项目无关 9 | -------------------------------------------------------------------------------- /reference tuts/reference.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /referenct tuts(sites): -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /tech/linux/linux_tech.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /tech/mac/mac_tech.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /tech/readme.txt: -------------------------------------------------------------------------------- 1 | #mainly contains releated detection tech article (主要包括相关检测技术相关文章) 2 | -------------------------------------------------------------------------------- /tech/windows/win_tech.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /tool/tool_list.txt: -------------------------------------------------------------------------------- 1 | #toolset 2 | 1.https://docs.microsoft.com/zh-cn/sysinternals/downloads/ 3 | 4 | 5 | #office analysis tool 6 | 1.https://github.com/decalage2/oletools (for example olevba can extact macro from doc) 7 | --------------------------------------------------------------------------------