srameko

admyral

🤖 Cybersecurity Automation & Investigation Assistant

cyberchef-recipes

A list of cyber-chef recipes and curated links

marp-slides-template

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

ChatGPT-for-Digital-Forensics

awesome-intelligence

A collaboratively curated list of awesome Open-Source Intelligence (OSINT) Resources

awesome-chatgpt-prompts-cybersecurity

网络安全chatgpt指令集，训练chatgpt成为一名网络安全专家

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

varc

Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of particular use when investigating a security incident.

LockBit-Black-Builder

beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

SysmonSimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

Ukraine-Cyber-Operations

Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

incidents-opendata

Data ke kybernetickým incidentům

Microsoft-Sentinel-SecOps

Microsoft Sentinel SOC Operations

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

AdvancedHunting

Advanced Hunting Queries for Microsoft Security Products

KQL

KQL queries for Advanced Hunting

cuckoo3

Cuckoo 3 is a Python 3 open source automated malware analysis system.

iris-web

Collaborative Incident Response platform

AzureForensics

pwnspoof

Pwnspoof repository

cset

Cybersecurity Evaluation Tool

Business-Email-Compromise-Guide

The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Office 365 environment. Each step is intended to guide the process of identifying, collecting and analysing activity associated with BEC intrusions.

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack

Invoke-Forensics

Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.

defender

notes on applied computer security

artifactcollector

🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system