Digital Forensics and Incident Response

reputation / location check

• abuseIPDB
• Cisco Talos Intelligence

research incident response tools

• Thor,
• Velocirapter,
• other Yara signatures,

system images analysis

• Autopsy
• X-Ways