NoCoolUserName

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

Language:PythonApache-2.0634 145 17

maltrieve

A tool to retrieve malware directly from the source for security researchers.

Language:PythonGPL-3.0562 96 116

dcept

A tool for deploying and detecting use of Active Directory honeytokens

Language:PythonGPL-3.0499 73 6

dalton

Suricata and Snort IDS rule and pcap testing system

Language:PythonApache-2.0437 44 23

VolUtility

Web App for Volatility framework

Language:PythonGPL-3.0378 40 61

minemeld

Main MineMeld documentation repo

378 74 63

ACE

Automated, Collection, and Enrichment Platform

Language:PowerShellApache-2.0322 44 6

VolatilityBot

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

Language:PythonMIT263 27 5

Registry

Full featured, offline Registry parser in C#

Language:C#MIT218 27 14

kippo-graph

Visualize statistics from a Kippo SSH honeypot

Language:PHPNOASSERTION134 17 50

pentest

Just a collection of pentest stuffs

Language:Shell96 5 1

Tableau-ATTCK

Understanding ATT&CK Matrix for Enterprise

79 140

volatility_plugins

Volatility Plugins

Language:PythonMIT62 5 1

YaraManager

Web based Manager for Yara Rules

Language:PythonGPL-2.057 11 1

YaraRules

My Yara Rules Collection

51 180

pdfxpose

A security tool for detecting suspicious PDF modifications commonly found in BEC

Language:PythonGPL-3.041 100

LSB_Steganography

A basic example of how to use Least Significant Bit steganography on a BMP image

Language:Python15 40

Whatype

Independent file type identification python library

Language:PythonGPL-3.012 40

InfinityEKPayloadDecrypter

Infinity Exploit Kit Payload Decrypter

Language:Python9 60

malwareconfig-miner

MineMeld Miner for Malwareconfig.com C2 Domains

Language:PythonApache-2.0400