stuhli

portfolio

Track and evaluate the performance of your investment portfolio across stocks, cryptocurrencies, and other assets.

visidata

A terminal spreadsheet multitool for discovering and arranging data

god-mode-rules

God Mode Detection Rules

cli

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

PSRansom

PowerShell Ransomware Simulator with C2 Server

emp3r0r

Linux/Windows post-exploitation framework made by linux user

ansible-collection-hardening

This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

ADTimeline

Timeline of Active Directory changes with replication metadata

jupyter-notebook-for-incident-response

A library of Incident Response notebooks using Jupyter. We will show how you can leverage pre-defined notebook files to guide your incident responders in identifying, containing, eradicating, and recovering from an incident.

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

FalconFriday

Hunting queries and detections

caOptics

CA Optics - Azure AD Conditional Access Gap Analyzer

maltrail

Malicious traffic detection system

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

Recover.vim

A Plugin to show a diff, whenever recovering a buffer

Splunk-input-windows-baseline

Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE Att&CK

Windows-Security-Event-ID-Helper

This repository provide a json file for all Windows security Event IDs with lot of useful informations (Categories, GPO, Volume, Recommandations).

csvtomd

📝📊 Convert your CSV files into Markdown tables.

UBUNTU22-CIS

Ansible role for Ubuntu22 CIS Baseline

Sparrow

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

upload-artifact

checkout

Action for checking out a repo

setup-python

Set up your GitHub Actions workflow with a specific version of Python

acquire

acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.

dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

DeTTECT

Detect Tactics, Techniques & Combat Threats

chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts