Microsoft-Extractor-Suite
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
information-gatheringdigital-forensicscloud-security+3
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
adibirzu/openclaw-security-monitorProactive security monitoring for OpenClaw deployments. Detects ClawHavoc, AMOS stealer, CVE-2026-25253, memory poisoning, and supply chain attacks.
limo57640-crypto/nginx-rift-detectorFree NGINX Rift CVE-2026-42945 detector for version, rewrite config, ASLR, crash logs, and exploitation indicators.
limo57640-crypto/cpanel-cve-41940-detectorRead-only cPanel CVE-2026-41940 IOC detector for .sorry ransomware, Mr_Rot13 Filemanager backdoors, C2 callbacks, cron, SSH, and logs.
jconeby/elastic-peak-dashboardsPEAK Baseline Threat Hunt dashboards for Security Onion 3.0 — covering DNS, HTTP, TLS, SMB, Kerberos, SSH, RDP, DCE/RPC, LDAP, Modbus, DNP3,…
ptd200110/cve-2024-27198-soc-lab
g0thamrabb1t/cve-2026-48907-joomla-jce-detectionDefensive lab validation and SOC detection guidance for CVE-2026-48907 in Joomla JCE <= 2.9.99.4, including Apache/Joomla/auditd telemetry, webshell…
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
ericzimmerman/kapefilesThis repository serves as a place for community created Targets and Modules for use with KAPE.
daadaismylife/log4shell-labLog4Shell (CVE-2021-44228) 보안 실습 환경 - Log4j 2.14.1 취약 로그 수집 서버
hengyoush/kyanosKyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes…
mahfuzreham/litespeed-cpanel-cve-2026-54420-fix
omerbenamram/evtxA Fast (and safe) parser for the Windows XML Event Log (EVTX) format
abdeljalilait/kerneleyeKernel-level security & attack response for Linux servers.
nate-ryan-7690/home_soc_suiteA personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…
g0thamrabb1t/cve-2026-43284-dirtyfrag-detectionThis repository contains a lab validation report and detection artefacts for DirtyFrag CVE-2026-43284, a Linux local privilege escalation issue…
tayontech/scopeAI agent set for cloud security purple teaming, runs inside Claude Code, Gemini CLI, and Codex.
lnfernux/log-horizonMicrosoft Sentinel SIEM Log Source Analyzer