Log Analysis

elevenpaths/thethe

thethe

tg12/dns-honeypot

dns-honeypot

mandiant/ioc-scanner-cve-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

jsa2/east

Extensible Azure Security Tool - Documentation

treussart/probemanager

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...

flo354/iosforensic

iOS forensic tool

k4yt3x/defense-matrix

Express security essentials deployment for Linux Servers

playtikaoss/leaktopus

Automated secret and leak detection scanner for GitHub and paste sites, with heuristic filtering, IOL enrichment via Shhgit/TruffleHog, and ELK-based…

cisagov/check-your-pulse

This utility can help determine if indicators of compromise (IOCs) exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510.

kolya5544/bearftp

Honeypot FTP server written in .NET Core (C#) for both Linux and Windows.

adamrpostjr/cve-2021-27065

Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.

mellow-hype/c2finder

Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

michaelsanford/log4shell-honeypot

Dockerized honeypot for CVE-2021-44228.

tracehound/tracehound

Operational security controls with forensic guarantees