Silv3rHorn

sidr

Search Index Database Reporter

DataSurgeon

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

Mido

The Secure Microsoft Windows Downloader

notatin

A Windows registry file parser written in Rust

logscale-community-content

This repository contains Community and Field contributed content for LogScale

aws-cheatsheet

A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

AzDetectSuite

A collection of ARM-based detections for Azure/AzureAD based TTPs

Yara-rules

Collection of private Yara rules.

aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.

VBoxCloak

A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ;)

guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

mmi

OS Triage for Anyone and Everyone

security-response-automation

Take automated actions against threats and vulnerabilities.

gato

GitHub Actions Pipeline Enumeration and Attack Tool

detection

Detection in the form of Yara, Snort and ClamAV signatures.

MemProcFS-Analyzer

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

jupyter-collection

Collection of Jupyter Notebooks by @fr0gger_

yaraQA

YARA rule analyzer to improve rule quality and performance

WinEDB

Windows.EDB Browser

Hoarder

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

IRM

Incident Response Methodologies 2022

GCTI

Yara-Repo

A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

Evtx_Log_Browser

Evtx Log (xml) Browser

awesome-detection-engineering

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

rtr

Real-time Response scripts and schema

tapir

TAPIR is a multi-user, client/server, incident response framework