|
1 | 1 | items: |
2 | | -- display_name: Timesketch |
3 | | - description: Export Plaso and compatible CSV/JSON files to Timesketch. |
4 | | - tools: |
5 | | - - display_name: Timesketch |
6 | | - description: Collaborative timeline analysis tool |
7 | | - url: https://timesketch.org |
8 | | - repository: openrelik/openrelik-worker-timesketch |
| 2 | +- display_name: Config file analyzer |
| 3 | + description: This worker analyzes configuration files can be used to identify potential |
| 4 | + security issues, misconfigurations, and other anomalies. |
| 5 | + tools: [] |
| 6 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-analyzer-config |
9 | 7 | license: Apache License 2.0 |
10 | 8 | owner: OpenRelik |
11 | | - updated_at: '2025-09-11' |
12 | | - url: https://github.com/openrelik/openrelik-worker-timesketch |
13 | | - github_stars: 10 |
14 | | -- display_name: AmCache-EvilHunter |
15 | | - description: Runs AmCache-EvilHunter to parse Windows Amcache.hve. |
16 | | - tools: |
17 | | - - display_name: AmCache-EvilHunter |
18 | | - description: parse and analyze Windows Amcache.hve registry hives, identify evidence |
19 | | - of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups |
20 | | - for enhanced threat intelligence. |
21 | | - url: https://github.com/cristianzsh/amcache-evilhunter |
22 | | - repository: FreeDurok/openrelik-worker-amcache-evilhunter |
23 | | - license: MIT License |
24 | | - owner: Durok |
25 | | - updated_at: '2025-09-11' |
26 | | - url: https://github.com/FreeDurok/openrelik-worker-amcache-evilhunter |
27 | | - github_stars: 2 |
28 | | -- display_name: Strings |
29 | | - description: Extract strings from files. |
| 9 | + updated_at: '2026-02-24' |
| 10 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-analyzer-config |
| 11 | + github_stars: 1 |
| 12 | +- display_name: Application Logs Analyzer |
| 13 | + description: This worker analyzes application log files that can be used to identify |
| 14 | + potential security issues. |
30 | 15 | tools: [] |
31 | | - repository: openrelik/openrelik-worker-strings |
| 16 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-analyzer-logs |
32 | 17 | license: Apache License 2.0 |
33 | 18 | owner: OpenRelik |
34 | | - updated_at: '2026-02-02' |
35 | | - url: https://github.com/openrelik/openrelik-worker-strings |
36 | | - github_stars: 0 |
37 | | -- display_name: Hayabusa |
38 | | - description: Windows event log fast forensics timeline generator and threat hunting |
39 | | - tool. |
| 19 | + updated_at: '2026-02-24' |
| 20 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-analyzer-logs |
| 21 | + github_stars: 1 |
| 22 | +- display_name: Bulkextractor |
| 23 | + description: Extracts structured information such as email addresses, credit card |
| 24 | + numbers, JPEGs and JSON snippets without parsing the file system or file system |
| 25 | + structures. |
| 26 | + tools: [] |
| 27 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-bulkextractor |
| 28 | + license: Apache License 2.0 |
| 29 | + owner: OpenRelik |
| 30 | + updated_at: '2026-02-24' |
| 31 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-bulkextractor |
| 32 | + github_stars: 1 |
| 33 | +- display_name: Capa |
| 34 | + description: Detect capabilities in executable files. |
40 | 35 | tools: |
41 | | - - display_name: Hayabusa |
42 | | - description: Windows event log fast forensics timeline generator and threat hunting |
43 | | - tool. |
44 | | - url: https://github.com/Yamato-Security/hayabusa |
45 | | - repository: openrelik-contrib/openrelik-worker-hayabusa |
| 36 | + - display_name: Capa |
| 37 | + description: Detect capabilities in executable files. |
| 38 | + url: https://github.com/mandiant/capa |
| 39 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-capa |
46 | 40 | license: Apache License 2.0 |
47 | | - owner: OpenRelik Contrib |
48 | | - updated_at: '2026-02-10' |
49 | | - url: https://github.com/openrelik-contrib/openrelik-worker-hayabusa |
50 | | - github_stars: 3 |
51 | | -- display_name: Plaso |
52 | | - description: Create super timelines from disk images and other data sources. |
| 41 | + owner: OpenRelik |
| 42 | + updated_at: '2026-02-24' |
| 43 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-capa |
| 44 | + github_stars: 1 |
| 45 | +- display_name: Chrome Credentials Analyser |
| 46 | + description: Analyse stored Chrome Credentials |
53 | 47 | tools: [] |
54 | | - repository: openrelik/openrelik-worker-plaso |
| 48 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-chromecreds |
55 | 49 | license: Apache License 2.0 |
56 | 50 | owner: OpenRelik |
57 | | - updated_at: '2026-02-09' |
58 | | - url: https://github.com/openrelik/openrelik-worker-plaso |
59 | | - github_stars: 6 |
| 51 | + updated_at: '2026-02-24' |
| 52 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-chromecreds |
| 53 | + github_stars: 1 |
60 | 54 | - display_name: dfIndexeddb |
61 | 55 | description: Experimental Python tool for performing digital forensic analysis of |
62 | 56 | IndexedDB and LevelDB files. |
63 | 57 | tools: [] |
64 | | - repository: openrelik/openrelik-worker-dfindexeddb |
| 58 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-dfindexeddb |
65 | 59 | license: Apache License 2.0 |
66 | 60 | owner: OpenRelik |
67 | | - updated_at: '2026-01-21' |
68 | | - url: https://github.com/openrelik/openrelik-worker-dfindexeddb |
69 | | - github_stars: 0 |
| 61 | + updated_at: '2026-02-24' |
| 62 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-dfindexeddb |
| 63 | + github_stars: 1 |
| 64 | +- display_name: Compute byte entropy for files. |
| 65 | + description: Computes byte entropy, flags files with entropy over a certain threshold. |
| 66 | + tools: [] |
| 67 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-entropy |
| 68 | + license: Apache License 2.0 |
| 69 | + owner: OpenRelik |
| 70 | + updated_at: '2026-02-24' |
| 71 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-entropy |
| 72 | + github_stars: 1 |
70 | 73 | - display_name: File Extraction |
71 | 74 | description: Extract files from disk images and archive files. |
72 | 75 | tools: [] |
73 | | - repository: openrelik/openrelik-worker-extraction |
| 76 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-extraction |
74 | 77 | license: Apache License 2.0 |
75 | 78 | owner: OpenRelik |
76 | | - updated_at: '2026-02-03' |
77 | | - url: https://github.com/openrelik/openrelik-worker-extraction |
| 79 | + updated_at: '2026-02-24' |
| 80 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-extraction |
78 | 81 | github_stars: 1 |
79 | | -- display_name: Compute byte entropy for files. |
80 | | - description: Computes byte entropy, flags files with entropy over a certain threshold. |
81 | | - tools: [] |
82 | | - repository: openrelik/openrelik-worker-entropy |
| 82 | +- display_name: FLARE Obfuscated String Solver (FLOSS) |
| 83 | + description: The FLARE Obfuscated String Solver uses advanced static analysis techniques |
| 84 | + to automatically extract and deobfuscate all strings from malware binaries. |
| 85 | + tools: |
| 86 | + - display_name: FLOSS |
| 87 | + description: Advanced static analysis techniques to automatically extract and |
| 88 | + deobfuscate all strings from malware binaries |
| 89 | + url: https://github.com/mandiant/flare-floss |
| 90 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-floss |
83 | 91 | license: Apache License 2.0 |
84 | 92 | owner: OpenRelik |
85 | | - updated_at: '2025-06-06' |
86 | | - url: https://github.com/openrelik/openrelik-worker-entropy |
87 | | - github_stars: 0 |
| 93 | + updated_at: '2026-02-24' |
| 94 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-floss |
| 95 | + github_stars: 1 |
88 | 96 | - display_name: Grep |
89 | 97 | description: Grep based on supplied pattern. |
90 | 98 | tools: [] |
91 | | - repository: openrelik/openrelik-worker-grep |
| 99 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-grep |
92 | 100 | license: Apache License 2.0 |
93 | 101 | owner: OpenRelik |
94 | | - updated_at: '2026-02-07' |
95 | | - url: https://github.com/openrelik/openrelik-worker-grep |
96 | | - github_stars: 0 |
| 102 | + updated_at: '2026-02-24' |
| 103 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-grep |
| 104 | + github_stars: 1 |
97 | 105 | - display_name: LLM Prompter |
98 | 106 | description: Take any files that can be read as UTF-8 and run a prompt on it. |
99 | 107 | tools: [] |
100 | | - repository: openrelik/openrelik-worker-llm |
| 108 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-llm |
101 | 109 | license: Apache License 2.0 |
102 | 110 | owner: OpenRelik |
103 | | - updated_at: '2025-05-29' |
104 | | - url: https://github.com/openrelik/openrelik-worker-llm |
105 | | - github_stars: 0 |
106 | | -- display_name: Chrome Credentials Analyser |
107 | | - description: Analyse stored Chrome Credentials |
| 111 | + updated_at: '2026-02-24' |
| 112 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-llm |
| 113 | + github_stars: 1 |
| 114 | +- display_name: Strings |
| 115 | + description: Extract strings from files. |
108 | 116 | tools: [] |
109 | | - repository: openrelik/openrelik-worker-chromecreds |
110 | | - license: N/A |
| 117 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-strings |
| 118 | + license: Apache License 2.0 |
111 | 119 | owner: OpenRelik |
112 | | - updated_at: '2026-01-09' |
113 | | - url: https://github.com/openrelik/openrelik-worker-chromecreds |
114 | | - github_stars: 0 |
115 | | -- display_name: Bulkextractor |
116 | | - description: Extracts structured information such as email addresses, credit card |
117 | | - numbers, JPEGs and JSON snippets without parsing the file system or file system |
118 | | - structures. |
| 120 | + updated_at: '2026-02-24' |
| 121 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-strings |
| 122 | + github_stars: 1 |
| 123 | +- display_name: Timesketch |
| 124 | + description: Export Plaso and compatible CSV/JSON files to Timesketch. |
| 125 | + tools: |
| 126 | + - display_name: Timesketch |
| 127 | + description: Collaborative timeline analysis tool |
| 128 | + url: https://timesketch.org |
| 129 | + repository: openrelik/openrelik-workers/workers/openrelik-worker-timesketch |
| 130 | + license: Apache License 2.0 |
| 131 | + owner: OpenRelik |
| 132 | + updated_at: '2026-02-24' |
| 133 | + url: https://github.com/openrelik/openrelik-workers/tree/main/workers/openrelik-worker-timesketch |
| 134 | + github_stars: 1 |
| 135 | +- display_name: Plaso |
| 136 | + description: Create super timelines from disk images and other data sources. |
119 | 137 | tools: [] |
120 | | - repository: openrelik/openrelik-worker-bulkextractor |
121 | | - license: N/A |
| 138 | + repository: openrelik/openrelik-worker-plaso |
| 139 | + license: Apache License 2.0 |
122 | 140 | owner: OpenRelik |
123 | | - updated_at: '2025-06-03' |
124 | | - url: https://github.com/openrelik/openrelik-worker-bulkextractor |
| 141 | + updated_at: '2026-02-09' |
| 142 | + url: https://github.com/openrelik/openrelik-worker-plaso |
| 143 | + github_stars: 6 |
| 144 | +- display_name: Hayabusa |
| 145 | + description: Windows event log fast forensics timeline generator and threat hunting |
| 146 | + tool. |
| 147 | + tools: |
| 148 | + - display_name: Hayabusa |
| 149 | + description: Windows event log fast forensics timeline generator and threat hunting |
| 150 | + tool. |
| 151 | + url: https://github.com/Yamato-Security/hayabusa |
| 152 | + repository: openrelik-contrib/openrelik-worker-hayabusa |
| 153 | + license: Apache License 2.0 |
| 154 | + owner: OpenRelik Contrib |
| 155 | + updated_at: '2026-02-10' |
| 156 | + url: https://github.com/openrelik-contrib/openrelik-worker-hayabusa |
| 157 | + github_stars: 3 |
| 158 | +- display_name: Elasticsearch |
| 159 | + description: Export workflow worker results into an Elasticsearch index. |
| 160 | + tools: |
| 161 | + - display_name: Elasticsearch |
| 162 | + description: Search and analytics engine for indexed worker output |
| 163 | + url: https://www.elastic.co/elasticsearch |
| 164 | + repository: dig-sec/openrelik-worker-elasticsearch |
| 165 | + license: N/A |
| 166 | + owner: Pabi |
| 167 | + updated_at: '2026-02-24' |
| 168 | + url: https://github.com/dig-sec/openrelik-worker-elasticsearch |
| 169 | + github_stars: 0 |
| 170 | +- display_name: AmCache-EvilHunter |
| 171 | + description: Runs AmCache-EvilHunter to parse Windows Amcache.hve. |
| 172 | + tools: |
| 173 | + - display_name: AmCache-EvilHunter |
| 174 | + description: parse and analyze Windows Amcache.hve registry hives, identify evidence |
| 175 | + of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups |
| 176 | + for enhanced threat intelligence. |
| 177 | + url: https://github.com/cristianzsh/amcache-evilhunter |
| 178 | + repository: FreeDurok/openrelik-worker-amcache-evilhunter |
| 179 | + license: MIT License |
| 180 | + owner: Durok |
| 181 | + updated_at: '2025-09-11' |
| 182 | + url: https://github.com/FreeDurok/openrelik-worker-amcache-evilhunter |
| 183 | + github_stars: 2 |
| 184 | +- display_name: openrelik-worker-clamav |
| 185 | + description: OpenRelik worker for malware scanning files and directories with ClamAV |
| 186 | + signatures. |
| 187 | + tools: |
| 188 | + - display_name: ClamAV |
| 189 | + description: Open-source antivirus engine for scanning files. |
| 190 | + url: https://www.clamav.net/ |
| 191 | + repository: dig-sec/openrelik-worker-clamav |
| 192 | + license: N/A |
| 193 | + owner: Pabi |
| 194 | + updated_at: '2026-02-24' |
| 195 | + url: https://github.com/dig-sec/openrelik-worker-clamav |
125 | 196 | github_stars: 0 |
0 commit comments