f-bader

Fabian Bader's starred repositories

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Language:PythonNOASSERTION11199 811 154

awesome-incident-response

A curated list of tools for incident response

Apache-2.07561 461 14

usbipd-win

Windows software for sharing locally connected USB devices to other machines, including Hyper-V guests and WSL 2.

Language:C#GPL-3.03568 51 474

timesketch

Collaborative forensic timeline analysis

Language:PythonApache-2.02586 136 1321

ascii-image-converter

A cross-platform command-line tool to convert images into ascii art and print them on the console. Now supports braille art!

Language:GoApache-2.02174 22 31

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Language:CMIT1073 13 9

ADACLScanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

Language:PowerShellMS-PL954 54 39

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Language:C++BSD-3-Clause925 13 3

LME

Logging Made Easy (LME) is a no-cost and open logging and protective monitoring solution serving all organizations.

Language:PythonNOASSERTION827 20 277

OrgKit

Provision a brand-new company with proper defaults in Windows, Offic365, and Azure

Language:PowerShell597 99 2

GraphStrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

Language:C544 9 4

Incident-Response-Powershell

PowerShell Digital Forensics & Incident Response Scripts.

Language:PowerShellBSD-3-Clause460 10 5

powershell-yaml

PowerShell CmdLets for YAML format manipulation

Language:PowerShellApache-2.0424 13 101

XLL_Phishing

XLL Phishing Tradecraft

Language:CMIT390 80

maester

The core repository for the Maester module with helper cmdlets that will be called from the Pester tests.

Language:HTMLMIT299 11 171

passkey-authenticator-aaguids

This repo contains a community sourced list of AAGUIDs for passkey authenticators to help with naming in end user management UIs

Language:JavaScript170 22 14

AntimalwareBlight

Execute PowerShell code at the antimalware-light protection level.

Language:PowerShellBSD-3-Clause135 40

DefenderATPQueries

Hunting Queries for Defender ATP

GPL-3.071 20

aad_prt_bof

Language:C++MIT68 3 1

AzureADJoinedMachinePTC

Tool to perform lateral movement between AAD joined devices

Language:PythonMIT52 4 1

Tier0-User-Management

Maintain Tier 0 users. This script take care all Tier 0 users are in the correct OU or in the default user container and add the Kerberos Authentication policy to the user

Language:PowerShell46 7 2