Log Analysis

ctxis/snitchdns

Database Driven DNS Server with a Web UI

cobalt-strike/sleep_python_bridge

This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need…

airbus-cert/etl-parser

Event Trace Log file parser in pure Python

viliuskraujutis/androidbroadcastsmonitor

A tool to subscribe to receive all standard Android broadcasts on your Android device.

yeet-src/sigwire

Live kernel signal observability tool using eBPF tracepoints to stream every signal raised on a Linux host, showing sender, target, disposition,…

mbabinski/sigma-rules

A repository of my own Sigma detection rules.

op7ic/blueteam.lab

Blue Team detection lab created with Terraform and Ansible in Azure.

mitre/brawl-public-game-001

Data from a BRAWL Automated Adversary Emulation Exercise

mthbernardes/artlas

Apache Real Time Logs Analyzer System

cred-club/artif

An advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.

hashicorp-forge/grove

A Software as a Service (SaaS) log collection framework.

a2awais/threat-hunting

Curated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…

anssi-fr/dfir4vsphere

Powershell module for VMWare vSphere forensics

yamato-security/wela

Audits Windows event log settings against best-practice guidelines and Sigma-rule detectability, with automated configuration for DFIR readiness.

jurelou/epagneul

Graph Visualization for windows event logs

ghassan-elsman/crow-eye

Open-source Windows forensics engine that acquires, parses, and correlates artifacts (MFT, USN, Registry, etc.) to reconstruct timelines with…