northshade

paloalto_mplog

EZ-Cloud

OC Admin (Formerly EZ-Cloud) - the Open Collector Admin and On-Boarder for Core SIEM

CAPEv2

Malware Configuration And Payload Extraction

docker-misp

A (nearly) production ready Dockered MISP

misp

Docker image for MISP

VulnWhisperer

Create actionable data from your Vulnerability Scans

guitarpedal

Guitar Pedal for Raspberry pi using Python and PYO library

auditd

Best Practice Auditd Configuration

NtdsAudit

An Active Directory audit utility

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

IntelOwl

IntelOwl: manage your Threat Intelligence at scale

RoadApplePi

An elegent "Black Box" solution that can be retrofitted into any car with an OBD(II) port for minimal cost.

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

PcapXray

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

awesome-incident-response

A curated list of tools for incident response

cuckoo3

Cuckoo 3 is a Python 3 open source automated malware analysis system.

access-manager

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.

EventLogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

ldapcherry

Web UI for managing users and groups in multiple directory services.

GoodHound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

ADTimeline

Timeline of Active Directory changes with replication metadata

PlumHound

Bloodhound Reporting for Blue and Purple Teams

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

gps-glonass-android-driver

GPS/GLONASS generic android driver (gps.default.so)

betterscan

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan

packer-plugin-arm-image

Packer plugin for ARM images

yubikey-manager

Python library and command line tool for configuring any YubiKey over all USB interfaces.

acme2certifier

library implementing ACME server functionality

dispatch

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

LogRhythm.Tools

LogRhythm PowerShell Toolkit