deeFIR

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

tacticalrmm

A remote monitoring & management tool, built with Django, Vue and Go.

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

log4j-shell-poc

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

Blue-Team-Notes

You didn't think I'd go and leave the blue team out, right?

xortool

A tool to analyze multi-byte xor cipher

LinuxForensics

Everything related to Linux Forensics

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

XstReader

Xst Reader is an open source viewer for Microsoft Outlook’s .ost and .pst files, written entirely in C#. To download an executable of the current version, go to the releases tab.

PCAP-ATTACK

PCAP Samples for Different Post Exploitation Techniques

log4jpwn

log4j rce test environment and poc

CyberPipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

Intune-ACSC-Windows-Hardening-Guidelines

Collection of Intune policies that could assist with implementing ACSC's Windows hardening guidance.

Awesome-BEC

Repository of attack and defensive information for Business Email Compromise investigations

seedvault_backup_parser

Decrypt, Modify and Reencrypt Seedvault Android Backups

Windows-Symbol-Tables

Windows symbol tables for Volatility 3

sboot_dump

SUC - A tool to dump RAM using Samsung S-Boot Upload Mode

FalsePositives

Tools that trigger False Positive AV alerts

Rhaegal

Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect suspicious/malicious logs

AzureForensics

SecurityInABox

A Central Location For Everything You Need To Start Your Own Security Program In Your Organisation.

proxmoxcuckoo

Cuckoo code to add support for Proxmox