linux-malware-detect
rfxn/linux-malware-detectMulti-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…
defensive-toolsmalware-analysisthreat-intelligence+3
1.5k
Tools for blue team, defensive security, and threat protection.
rfxn/linux-malware-detectMulti-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…
yamato-security/enablewindowslogsettingsDocumentation and scripts to properly enable Windows event logs.
ransomlook/ransomlookAutomated ransomware and leak-site OSINT tracker scraping dark-web markets, monitoring victim posts, enriching actor/crypto data, and sending…
olafhartong/sysmon-parserGenerates and maintains Azure Sentinel parser for Sysmon events, normalizing all Windows endpoint telemetry into a searchable log schema via…
huntandhackett/antignisAutomates Windows host-based firewall management by importing network data into a central database, creating Active Directory groups, and generating…
cisagov/scubagearAutomation to assess the state of your M365 tenant against CISA's baselines
chainguard-dev/osquery-defense-kitProduction-ready detection & response queries for osquery
mbabinski/sigma-rulesA repository of my own Sigma detection rules.
bartblaze/yara-rulesCollection of private Yara rules.
r-pufky/wireguard-initramfsUse dropbear over wireguard.
0x6d69636b/windows_hardeningAudits Windows security settings against CIS, Microsoft, STIG, and BSI baselines, scores compliance, and applies hardening changes via registry or…
scriptjunkie/fwallowerAnalyze Windows Firewall outbound blocks and selectively allow traffic
airbus-cert/vbsparkleVBScript & VBA source-to-source deobfuscator with partial-evaluation
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.