Archived
rip_raw
cado-security/rip_rawRip Raw is a small tool to analyse the memory of compromised Linux systems.
memory-forensicsforensicsdata-recovery+3
133
Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
0x0v1/audixAudix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
mandiant/ioc-scanner-cve-2019-19781Indicator of Compromise Scanner for CVE-2019-19781
jsa2/eastExtensible Azure Security Tool - Documentation
treussart/probemanagerCentralize Management of Intrusion Detection System like Suricata Bro Ossec ...
k4yt3x/defense-matrixExpress security essentials deployment for Linux Servers
cisagov/check-your-pulseThis utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.
kolya5544/bearftpHoneypot FTP server written in .NET Core (C#) for both Linux and Windows.
adamrpostjr/cve-2021-27065Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.
signalapp/key-transparency-auditorContinuously fetches and cryptographically verifies key transparency log updates, maintains a condensed prefix and log tree view, and returns signed…
mellow-hype/c2finderLook for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)
michaelsanford/log4shell-honeypotDockerized honeypot for CVE-2021-44228.
karitamw/printnightmare-detection-mitigation-labSanitised Windows security lab demonstrating Active Directory administration, host and network detection, and layered mitigation of CVE-2021-34527.
tracehound/tracehoundOperational security controls with forensic guarantees
