hazmat09

awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

bypass-sentry-safe

enip-stack-detector

EtherNet/IP & CIP Stack Detector

CTI-IOC-Processor

awesome-intelligence-writing

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

kestrel-lang

Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.

kubestriker

A Blazing fast Security Auditing tool for Kubernetes

ICS-Security

ICS security resources

urlhunter

a recon tool that allows searching on URLs that are exposed via shortener services

PNT-Integrity

The PNT Integrity Library provides users a method to verify the integrity of the received GPS data and ranging signals, thereby improving resiliency against potential GPS signal loss.

Epsilon

The Epsilon Algorithm Suite provides users a method to verify the integrity of the received GPS data and ranging signals, thereby improving resiliency against potential GPS signal loss.

owasp-fstm

The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

cycat-project-website

cycat-taxonomy

CyCAT.org taxonomies

policy-bot

A GitHub App that enforces approval policies on pull requests

CIMPLICITY-Hardening-Tool

PowerShell script for hardening GE digital CIMPLICITY servers

openHistorian

The Open Source Time-Series Data Historian

ics_mem_collect

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

awesome-ics-writeups

Collection of writeups on ICS/SCADA security.

Sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

research

software-supply-chain-compromises

A dataset of software supply chain compromises. Please help us maintain it!

SolarwindsVulnerablityInfo

Repository with all the Solarwinds Vulnerability information I've been tracking and using for communications, review, and technical understanding.

atlasutils

crappy set of one-off scripts and tools used for reversing and vulnerability research.

sunburst_countermeasures

red_team_tool_countermeasures

WDAC-Toolkit

Documentation and tools to access Windows Defender Application Control (WDAC) technology.

PCS7-Hardening-Tool

PowerShell script for hardening Siemens Simatic PCS 7 servers