MattETurner

claude-dev

Autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, and more with your permission every step of the way.

DFIRlogbook

Logbook for Digital Forensics and Incident Response

Descent3

Descent 3 by Outrage Entertainment

forensictools

Collection of forensic tools

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

memOptix

A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.

TeraLogger

A Teracopy history log parser

play.backdoorsandbreaches.com

Dashboard for conducting Backdoors and Breaches sessions over Zoom.

AllthingsTimesketch

This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.

StableLM

StableLM: Stability AI Language Models

serge

A web interface for chatting with Alpaca through llama.cpp. Fully dockerized, with an easy to use API.

mindsdb

The platform for building AI from enterprise data

DFIR-Templates

Incident Response documents and tooling

rust-course

Asynchronous-Programming-with-SwiftUI-and-Combine

Code for my book, SwiftUI & Combine

LUMI-lights

Effort to understand and drive the lights of the LUMI keyboard outside of ROLI software

SANSGoldPaperResearch_FOR500_Rathbun

A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.

winreg-tasks

memory-baseliner

Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on multiple such images

MemProcFS

MemProcFS

SRUM-Timeliner

PowerShell-Timeliner

Microsoft-Extractor-Suite

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

MemLabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts

The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportunity to write a chapter of a book to get their name out there, get a publication on their resume with an actual ISBN number, and ideally lower the bar for people to contribute something back to the DFIR Community. Want to write a chapter? Let me know and let's make it happen!

mass_triage_tools

Mass Triage Tools

CloudLabsAD

Terraform + Ansible deployment scripts for an Active Directory lab environment.

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

conti_202202_leak_procedures

This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.

drakvuf-sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system