Silv3rHorn

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

IRM

Incident Response Methodologies 2022

DataSurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

GCTI

Mido

The Secure Microsoft Windows Downloader

gato

GitHub Actions Pipeline Enumeration and Attack Tool

MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

Yara-rules

Collection of private Yara rules.

VBoxCloak

A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ;)

security-response-automation

Take automated actions against threats and vulnerabilities.

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

Hoarder

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

detection

Detection in the form of Yara, Snort and ClamAV signatures.

jupyter-collection

Collection of Jupyter Notebooks by @fr0gger_

logscale-community-content

This repository contains Community and Field contributed content for LogScale

yaraQA

YARA rule analyzer to improve rule quality and performance

rtr

Real-time Response scripts and schema

AzDetectSuite

A collection of ARM-based detections for Azure/AzureAD based TTPs

sidr

Search Index Database Reporter

Evtx_Log_Browser

Evtx Log (xml) Browser

aws-cheatsheet

A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

WinEDB

Windows.EDB Browser

tapir

TAPIR is a multi-user, client/server, incident response framework

notatin

A Windows registry file parser written in Rust

Yara-Repo

A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

mmi

OS Triage for Anyone and Everyone