poincarel3alim

EvtxHussar

Initial triage of Windows Event logs

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web

cosa-nostra

Cosa Nostra, a FOSS graph based malware clusterization toolkit.

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

Captain

Userland API monitor for threat hunting

x86Emulator

volatility

An advanced memory forensics framework

z3

The Z3 Theorem Prover

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

injection

Port-knocking-Backdoor

A Linux backdoor that is activated using a “port knocking” scheme

Project