joeavanzato

panscan's repositories

Trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

Language:PowerShellMIT305 2 11

LogBoost

Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indicator matches.

Language:GoMIT91 3 1

RetrievIR

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

Language:PowerShellMIT84 4 2

crackdown

Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.

Language:GoMIT15 20

velociraptor-timeline-creator

VTC - Velociraptor Timeline Creator

Language:GoMIT15 10

ThreatSim

Threat Simulator for Enterprise Networks

Language:PythonMIT13 20

WMIHunter

Asynchronous Remote Evidence Retrieval for rapid network-wide threat hunting

Language:PowerShellMIT7 20

demo-react-flask-mui-auth

Example React app utilizing MaterialUI with Flask JWT-authed API backend.

Language:JavaScriptMIT5 20

MalCommands

Documenting Suspicious Command Lines

Language:HTML5 20

RAID

Rapid Acqusition of Interesting Data

Language:PowerShell5 20

YARACheck

Update and use YARA rules from across the Internet against targeted files or directories.

Language:PythonMIT500

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

Apache-2.04 10

PyShares

SharpShares..but in Python!

Language:PythonMIT4 20

LogonGrabber

Remote retrieval, filtering and analysis of Security.evtx logs for user activity analysis.

Language:Python300

SimpleScanner

Basic XSS, SQLi and LFI Vulnerability Scanner

Language:Python3 20

WinGraph

Graph Visualizer for Windows Event Logs

Language:Python3 20

AuthMap

Authentication Mapper - helping blue-teams analyze authentication activity in Active Directory networks.

Language:PowerShellMIT200

IOCFeed

Language:PythonMIT2 20

joeavanzato.github.io

Language:JavaScript2 20

NetPeek

TCP Port Scanner, FTP Anonymous Login Query, UDP Flooding

Language:Python2 20

PortCheck

Use TCP or UDP to check connection availability for remote hosts

Language:Python2 20

EyeOfTheBeholder

Language:Batchfile100

Outlooked-IOC

Tool for scanning an Outlook Inbox in order to discover Indicators of Compromise - intelligence dissemination/bulletins, *-ISAC Threads, etc,

Language:Python1 20

PacketSimulator

Language:Python100

PMATCH

Recursive file-hasher and string-matcher

Language:Python1 10

PythonWebServer

Language:Python1 20

QuickScan

Hunting for Abnormalities

Language:PythonMIT100

ipenrich

MIT000

velociraptor-docs

Documentation site for Velociraptor

Language:HTMLNOASSERTION000

WARD

Windows Artifact Retrieval and Discovery

Language:PythonMIT000