Log Analysis

pe3zx/crowdstrike-falcon-queries

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

citrix/ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

mandiant/ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

l4r1k/citrixnetscaleranalysis

🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781

onsec-fr/cve-2019-19781-forensic

Automated forensic script hunting for cve-2019-19781

vdisec/cve-2019-19871-auditguide

Audit Guide for the Citrix ADC Vulnerability CVE-2019-19871. Collected from multiple sources and threat assessments. Will be updated as new methods…

forensicmatt/rswindowsthingies

Rust-based Windows forensic toolkit for real-time MFT monitoring, event log streaming, and channel enumeration, enabling live system analysis and…

seccubus/seccubus

Easy automated vulnerability scanning, reporting and analysis

paulsec/awesome-windows-domain-hardening

A curated list of awesome Security Hardening techniques for Windows.

yampelo/beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

biggiesmallsag/nighthawkresponse

Incident Response Forensic Framework

mozilla/mig

Distributed & real time digital forensics at the speed of the cloud

nccgroup/impossibletravelloganalysis

Basic log analysis tool to detect impossible travel via IP address geographic information

treussart/probemanager

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...

josehelps/cve-2019-6340-bits

Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE

t4d/phishingkithunter

Find phishing kits which use your brand/organization's files and image.

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables