#1IR playbooks, triage, case management, evidence collection, and incident management tools.
Kitploit recommended
adamrpostjr/cve-2021-27065Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.
dbrant/bios_memimageRAM imaging utility.
puppetlabs-toy-chest/puppetlabs-cve20113872Puppet Module to help fix and migrate a Puppet deployment (CVE-2011-3872)
cosmo121/follina-remediationRemoves the ability for MSDT to run, in response to CVE-2022-30190 (Follina)
j81blog/adc-19781Check ADC for CVE-2019-19781
gamingwithevets/msdt-disableMSDT protocol disabler (CVE-2022-30190 patch tool)
aws-samples/kubernetes-log4j-cve-2021-44228-node-agentKubernetes DaemonSet that hot-patches JVMs to mitigate Log4j2 vulnerabilities (CVE-2021-44228, CVE-2021-45046) by disabling JNDI lookups, providing…
jotaqc/cve-2022-30190_temporary_fix_source_codeThese are the source codes of the Python scripts to apply the temporary protection against the CVE-2022-30190 vulnerability (Follina)
sysadmin0815/fix-log4j-powershellscriptLog4Shell mitigation (CVE-2021-44228) - search and remove JNDI class from *log4j*.jar files on the system with Powershell (Windows)
leetxyz/cve-2021-44228-advisoriesList of company advisories log4j
insomnisec/detections-cve-2026-23918Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
castlesmadeofsand/ms-msdt-vulnerability-pdq-packagePDQ package for detecting CVE-2022-30190 (Follina) vulnerability by scanning registry keys (ms-msdt, search-ms) across Windows endpoints, enabling…
below0day/honeypot-logs-cve-2025-5777CitrixBleed 2 NetScaler honeypot logs
sucuri-labs/cve-2025-57819-ioc-checkThis is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819
tracehound/tracehoundOperational security controls with forensic guarantees
