Log Analysis

thelightscope/thelightscope

TheLightScope

corelight/corelightforsentinelone

Corelight Dashboards and Parsers for Sentinel One Singularity

ake13-art/secfesc

Lightweight security state inspector for Linux — bridging the gap between pretty fetch tools and heavy-duty audit frameworks.

bfurkanyildiz/android-rce-analizi

Android CVE-2024-0044, 43093, 23706 zafiyet analizi ve PoC lab ortamı

lightless-labs/third-thoughts

Research toolkit for analyzing AI agent behavioral patterns through multi-disciplinary corpus analysis. Parses session logs, runs 23 analytical…

cyb3rmik3/kql-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

corelight/corelightforsecops

Chronicle parser for CORELIGHT and related information.

matthart1983/essh

Enhanced SSH client with TUI — manage connections, keys, and sessions

zh54321/snafflerparser

Parses Snaffler output file and generate beautified outputs.

bert-janp/incident-response-powershell

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

osbornepro/btps-secpack

PowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…

cmpnn-romain/cve-2024-27198_lab

Lab for the CVE-2024-27198

shellkraft/ledger

An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…

airbus-cert/etl-parser

Event Trace Log file parser in pure Python

oseguera12/cowrie-honeypot-digitalocean

Medium-interaction SSH/Telnet honeypot built with Cowrie, Loki, Promtail, and Grafana - provisioned on DigitalOcean via Terraform with a GitLab CI…

tg12/dns-honeypot

dns-honeypot