ketshash
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
defensive-toolsnetwork-securitypenetration-testing+3
169
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
cyberark/ketshashA little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
usarmyresearchlab/dshellDshell is a network forensic analysis framework.
jepaynemsft/wefflesBuild a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI
ossec/ossec-hidsOSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit…
aker-gateway/akerSSH bastion/jump host/jumpserver
jpcertcc/logontracerInvestigate malicious Windows logon by visualizing and analyzing Windows event log
owasp/securetea-projectThe OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)
ntop/ntopngWeb-based Traffic and Cybersecurity Network Traffic Monitoring
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
yampelo/beagleBeagle is an incident response and digital forensics tool which transforms security logs and data into graphs.
ostesayed/oste-web-log-analyzerOSTE WLA automate the process of analyzing web server logs with the Python Web Log Analyzer.
cocoadebug/cocoadebugiOS Debugging Tool 🚀
securityjoes/masterparserMasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
orlikoski/skadiCollect, Process, and Hunt with host based data from MacOS, Windows, and Linux
idaholab/malcolmMalcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…
ion28/bluespawnAn Active Defense and EDR software to empower Blue Teams