
Notes
Curated study notes and interview preparation guide for security engineering roles, covering networking, web security, cryptography, malware…

Curated study notes and interview preparation guide for security engineering roles, covering networking, web security, cryptography, malware…

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

Cross-platform memory dumper using Frida to extract accessible memory from iOS, Android, and Windows applications for forensic analysis and…

Free educational courses in cybersecurity, reverse engineering, malware analysis, and programming designed to expand access, build practical skills,…

Hands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

Labs for Practical Malware Analysis & Triage

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures…

A centralized and enhanced memory analysis platform

SO-CRATES: Security Onion Containerized Rapid Analysis of Threats, Evil, and Sus!

Community-maintained Volatility plugin collection for memory forensics, extending memory dump analysis with modules for malware and process…

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt,…

Windows Analysis and Research Toolkit

Swift-based macOS incident response framework for collecting and analyzing host artifacts, including filesystem timestamps, browser data, unified…

Automates Linux swap analysis to extract user credentials, web form data, WiFi keys, and HTTP authentication during post-exploitation or forensic…