Threat-Remediation-Scripts
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
defensive-toolspacket-sniffing-analysisport-scanning+5
190
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
kacos2000/evtx_log_browserEvtx Log (xml) Browser
neo23x0/raccineA Simple Ransomware Vaccine
reprise99/sentinel-queriesCurated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…
anssi-fr/dfir4vspherePowershell module for VMWare vSphere forensics
sigmahq/pysigma-backend-opensearchConverts Sigma detection rules into OpenSearch Lucene and PPL queries, including alerting Monitor Rules and correlation support for SIEM detection…
sigmahq/sigma-cliThe Sigma command line interface based on pySigma
gossithedog/threathuntingHunts for potential malware downloads and suspicious domain calls via common Windows LOLBins using YARA rules and Nexthink telemetry modules.
the-dfir-report/sigma-rulesRules generated from our investigations.
target/strelka-uiStrelka Web UI for File Submission and Analysis
withsecurelabs/chainsawRapidly Search and Hunt through Windows Forensic Artefacts
mgeeky/decode-spam-headersA script that helps you understand why your E-Mail ended up in Spam
mandiant/macos-unifiedlogsParses Apple Unified Logs to extract process, thread, activity, timestamp, and message metadata from logarchives or live macOS systems into JSONL/CSV…
olafhartong/sysmon-modularA repository of sysmon configuration modules
cyb3r-monk/rita-jImplementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.
ion-storm/sysmon-configAdvanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…