joeavanzato

Trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

LogBoost

Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indicator matches.

crackdown

Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.

ThreatSim

Threat Simulator for Enterprise Networks

RetrievIR

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

MACfuscator

Anti-Forensics Timeline Obfuscation Utility

WMIHunter

Asynchronous Remote Evidence Retrieval for rapid network-wide threat hunting

velociraptor-timeline-creator

VTC - Velociraptor Timeline Creator

demo-react-flask-mui-auth

Example React app utilizing MaterialUI with Flask JWT-authed API backend.

ExtCheck

File Signature Analysis Tool

MalCommands

Documenting Suspicious Command Lines

RAID

Rapid Acqusition of Interesting Data

YARACheck

Update and use YARA rules from across the Internet against targeted files or directories.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

LogonGrabber

Remote retrieval, filtering and analysis of Security.evtx logs for user activity analysis.

SimpleScanner

Basic XSS, SQLi and LFI Vulnerability Scanner

WinGraph

Graph Visualizer for Windows Event Logs

IOCFeed

joeavanzato.github.io

NetPeek

TCP Port Scanner, FTP Anonymous Login Query, UDP Flooding

PortCheck

Use TCP or UDP to check connection availability for remote hosts

PyShares

SharpShares..but in Python!

EyeOfTheBeholder

Outlooked-IOC

Tool for scanning an Outlook Inbox in order to discover Indicators of Compromise - intelligence dissemination/bulletins, *-ISAC Threads, etc,

PacketSimulator

PMATCH

Recursive file-hasher and string-matcher

PythonWebServer

QuickScan

Hunting for Abnormalities

velociraptor-docs

Documentation site for Velociraptor

WARD

Windows Artifact Retrieval and Discovery