hossammosttafa

parameth

This tool can be used to brute discover GET and POST parameters

Parasite-Invoke

Hide your P/Invoke signatures through other people's signed assemblies

ELITEWOLF

OT security monitoring #nsacyber

Conferences

Conference presentation slides

UFADE

Extract files from iOS devices on Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "advanced logical backups"

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Zircolite

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

CVE-2024-3094-info

Information for CVE-2024-3094

Psinfo

Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process Enivornment Block) and displays the collected information and suspicious memory regions for all the processes running on the system. This plugin should allow a security analyst to get the process related information and spot any process anamoly without having to run multiple plugins.

aa-tools

Artifact analysis tools by JPCERT/CC Analysis Center

GVol

community

Volatility plugins developed and maintained by the community

CATReloaded-Circles-Roadmaps-2023

digital-forensics-lab

Digital forensics lab course, as offered in FAST NUCES Karachi during Spring 2023.

Mobileforensics

Python scripts for doing Android or IOS mobile forensics

ANDROPHSY

An Open Source Mobile Forensics Investigation Tool for Android Platform

Santoku-Linux

Linux Distro for Mobile Security, Malware Analysis, and Forensics

OpenMF

An Open Source Mobile Forensics Investigation Tool for Android Platform

OSINT-FORENSICS-MOBILE

Tools OSINT MOBILE

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

Hoarder

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

Kuiper

Digital Forensics Investigation Platform

AutoParser

AutoParser is a forensic tool for parsing offline registry hives.

EVTX-to-MITRE-Attack

Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

Calendarinho

Manage Your Large Team of Consultants

caldera

Automated Adversary Emulation Platform

osquery-defense-kit

Production-ready detection & response queries for osquery

catalyst

Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

sysmon-modular

A repository of sysmon configuration modules