november 's starred repositories
awesome-cybersecurity-blueteam
:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
awesome-forensics
A curated list of awesome forensic analysis tools and resources
hardentools
Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
volatility3
Volatility 3.0 development
PowerForensics
PowerForensics provides an all in one platform for live disk forensic analysis
red-team-scripts
A collection of Red Team focused tools, scripts, and notes
IRM-deprecated
Incident Response Methodologies
dostoevsky-pentest-notes
Notes for taking the OSCP in 2097. Read in book form on GitBook
Yara-Rules
Repository of YARA rules made by Trellix ATR Team
PSRecon
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
YaraGuardian
Django web interface for managing Yara rules
usbdeviceforensics
Python script for extracting USB information from Windows registry hives
yara-endpoint
Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.
volatility_profile_builder
Python script to auto-build linux volatility profiles