Silv3rHorn

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

IRM

Incident Response Methodologies 2022

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

DataSurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

gato

GitHub Actions Pipeline Enumeration and Attack Tool

Mido

The Secure Microsoft Windows Downloader

GCTI

MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

shell-backdoor

all shell backdoor in the world

Yara-rules

Collection of private Yara rules.

managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

VBoxCloak

A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ;)

security-response-automation

Take automated actions against threats and vulnerabilities.

detection

Detection in the form of Yara, Snort and ClamAV signatures.

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

Hoarder

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

jupyter-collection

Collection of Jupyter Notebooks by @fr0gger_

logscale-community-content

This repository contains Community and Field contributed content for LogScale

yaraQA

YARA rule analyzer to improve rule quality and performance

sidr

Search Index Database Reporter

AzDetectSuite

A collection of ARM-based detections for Azure/AzureAD based TTPs

aws-cheatsheet

A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

Evtx_Log_Browser

Evtx Log (xml) Browser

WinEDB

Windows.EDB Browser

notatin

A Windows registry file parser written in Rust

Yara-Repo

A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

mmi

OS Triage for Anyone and Everyone