Blue-Team-Notes
purp1ew0lf/blue-team-notesYou didn't think I'd go and leave the blue team out, right?
curated-resourcesdigital-forensicseducation+5
1.8k
purp1ew0lf/blue-team-notesYou didn't think I'd go and leave the blue team out, right?
cado-security/dfir_resources_revil_kaseyaResources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
intelowlproject/intelowlScalable threat intelligence platform that enriches observables and files using 200+ analyzers, with built-in GUI, REST API, and automated workflows…
sbousseaden/evtx-attack-samplesCurated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…
tsale/awesome-dfir-skillsA curated collection of DFIR skills and workflows for InfoSec practitioners.
meirwah/awesome-incident-responseCurated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
mthcht/threathunting-keywordsAwesome list of keywords and artifacts for Threat Hunting sessions
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
andrewrathbun/dfirartifactmuseumThe goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact…
mikeroyal/digital-forensics-guideDigital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links
ashemery/linuxforensicsEverything related to Linux Forensics
cr0nx/awesome-linux-attack-forensics-purplelabsThis page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
l4r1k/citrixnetscaleranalysis🔬 Jupyter notebook to help automate some of the forensic analysis related to Citrix Netscalers compromised via CVE-2019-19781
sifalcon/detectionCurated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…
azeemering/cve-2019-19781-dfir-notesMy Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.