#1Log parsing, SIEM, centralized logging, forensic timeline, and security event correlation tools.
Kitploit recommended
diogo-fernan/ir-rescueA Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
nccgroup/loggerplusplusAdvanced Burp Suite Logging Extension
scarredmonk/sysmonsimulatorSysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and…
mandiant/macos-unifiedlogsA cross platform parser for Apple UnifiedLogs!
biggiesmallsag/nighthawkresponseIncident Response Forensic Framework
activecm/ritaReal Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
duggytuxy/syswardenHost-local Linux security orchestrator enforcing nftables policy with HIDS/HIPS telemetry, bounded threat-intelligence feeds, out-of-band WAAP log…
neo23x0/loki-rs🐍 High-performance, multi-threaded YARA & IOC scanner
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
darkquasar/azurehunterA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
d3vl/l3monWeb-based network monitoring system providing real-time bandwidth tracking, server performance metrics, and customizable alerts for proactive network…
eshlomo1/microsoft-sentinel-secopsSOC operations content for Microsoft Sentinel, including hunting queries, incident response playbooks, and security event analysis for Azure cloud…
securityjoes/masterparserMasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs
nextronsystems/sysmon-configSysmon configuration file template with default high-quality event tracing
justicerage/freedomfightingA collection of scripts which may come in handy during your freedom fighting activities.
back2root/log4shell-rexPCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs
owasp/python-honeypotOWASP Honeypot, Automated Deception Framework.
