Archived
WhoDat
mitrecnd/whodatPivotable Reverse WhoIs / PDNS Fusion with Registrant Tracking & Alerting plus API for automated queries (JSON/CSV/TXT)
osintreconnaissancedata-exfiltration+5
159
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
mthbernardes/artlasApache Real Time Logs Analyzer System
d4vinci/eagleeyeA host-based IDS and network monitoring system (My graduation project)
mrezqi/cve-2021-1675_carbonblack_huntingquery
packetsifter/packetsiftertoolPacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter…
cyberdefenders/detectionlabelkDetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
jangeisbauer/gundoggundog - guided hunting in Microsoft Defender
security-onion-solutions/security-onionSecurity Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
viliuskraujutis/androidbroadcastsmonitorA tool to subscribe to receive all standard Android broadcasts on your Android device.
cyberark/skywrapperSkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS
dcscoder/exchange_ioc_hunterCVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065
adamrpostjr/cve-2021-27065Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.
corelight/zeek-quicBro analyzer that detects Google's QUIC protocol
diogo-fernan/ir-rescueA Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
aker-gateway/akerSSH bastion/jump host/jumpserver
keyboardcrunch/sentinelone-attack-queriesMITRE ATT&CK mapped queries for SentinelOne Deep Visiblity
guillaumepetit84/cve-2020-35488