hackjalstead

ESXiAudit

ESXi security configuration audit.

Rhadamanthys-Stealer

LazyAdmin

SysAdmin scripts for you to use.

Anydesk_Forensics

Trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

BlueTeam-Tools

Tools and Techniques for Blue Team / Incident Response

untitledgoosetool

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to run a full investigation against a customer’s Azure Active Directory (AzureAD), Azure, and M365 environments.

ChopChopGo

Rapidly Search and Hunt through Linux Forensics Artifacts

EventFinder2

Finds event logs between two time points. Useful for helpdesk/support/malware analysis.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

pointer

Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.

ESXiTri

ESXi Cyber Security Incident Response Script

melting-cobalt

A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object

OSINT-SearchOperators

talks

Presentation materials for talks I've given.

IOK

IOK (Indicator Of Kit) is an open source language and ruleset for detecting phishing threat actor tools and tactics

cobalt-strike-stager-parser

Invictus-AWS

InfraHunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

Crypto-OpSec-SelfGuard-RoadMap

Here we collect and discuss the best DeFi, Blockchain and crypto-related OpSec researches and data terminals - contributions are welcome.

udemy-downloader

A Udemy downloader that can download DRM protected videos and non-DRM protected videos.

phishing_kits

Exposing phishing kits seen from phishunt.io

APT_REPORT

Interesting APT Report Collection And Some Special IOC

ThreatHound

DFIRPowerShellScripts

Various PowerShells scripts I've made (or others have made) to automate some of the boring stuff in my everyday DFIR journey!

IRM

Incident Response Methodologies 2022

Sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

Business-Email-Compromise-Guide

The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Office 365 environment. Each step is intended to guide the process of identifying, collecting and analysing activity associated with BEC intrusions.

adsec

An introduction to Active Directory security