awesome-soc-analyst
letsdefend/awesome-soc-analystUseful resources for SOC Analyst and SOC Analyst candidates.
phishingmalware-analysisdigital-forensics+6
986
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
letsdefend/awesome-soc-analystUseful resources for SOC Analyst and SOC Analyst candidates.
neo23x0/raccineA Simple Ransomware Vaccine
cisagov/untitledgoosetoolUntitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…
t0pcyber/hawkPowershell Based tool for gathering information related to O365 intrusions and potential Breaches
omerbenamram/evtxA Fast (and safe) parser for the Windows XML Event Log (EVTX) format
scarredmonk/sysmonsimulatorSysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and…
ericzimmerman/kapefilesThis repository serves as a place for community created Targets and Modules for use with KAPE.
logpresso/cve-2021-44228-scannerVulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
wagga40/zircoliteA standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
ion-storm/sysmon-configAdvanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…
cisco-ai-defense/defenseclawSecurity Governance for Agentic AI
bert-janp/incident-response-powershellPowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…
darkquasar/azurehunterA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
travisfsmith/sweetsecurityNetwork Security Monitoring on Raspberry Pi type devices
