TannerFilip

vipyrsec-deobfuscator

Rewrapping FieryIceStickie's Deobfuscation Tools

evtx2es

A library for fast parse & import of Windows Eventlogs into Elasticsearch.

mac-dev-playbook

Mac setup and configuration via Ansible.

awesome-malware-analysis

Defund the Police.

bspy

Blue-Team-Notes

You didn't think I'd go and leave the blue team out, right?

awesome-incident-response

A curated list of tools for incident response

opencti

Open Cyber Threat Intelligence Platform

awesome-forensics

A curated list of awesome forensic analysis tools and resources

rtr

Real-time Response scripts and schema

Incident-Response-Powershell

PowerShell Digital Forensics & Incident Response Scripts.

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

MOVEit-Transfer

A repository for tracking events related to the MOVEit Transfer Cl0p Campaign

Awesome_Incident_Response

Awesome Incident Response

crowdstrike-falcon-queries

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

velociraptor

Digging Deeper....

strelka

Real-time, container-based file scanning at enterprise scale

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Loki2

LOKI2 - Simple IOC and YARA Scanner

Loki

Loki - Simple IOC and YARA Scanner

ThreatHunting-Keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

SIGMA-detection-rules

Set of SIGMA rules (>320) mapped to MITRE ATT&CK tactic and techniques

Meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Falcon-Toolkit

Unleash the power of the Falcon Platform at the CLI

rhq

Recon Hunt Queries

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

ransomwatch

the transparent ransomware claim tracker 🥷🏼🧅🖥️

harpoon

CLI tool for open source and threat intelligence