
ics-forensics-tools
Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

Digital forensic acquisition tool for Windows based incident response.

Incident Response collection and processing scripts with automated reporting scripts


A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

Detection Script for MongoBleed Exploitation

A simple, reliable and reasonably fast network capture analyzer.

USB device connection forensics tool that traces physical device-to-computer relationships across local and domain networks, generating visual graphs…

Live monitoring tool for remote PowerShell sessions using ETW to capture and decode WinRM/PSRP protocol, providing command execution traces and…

Passive hybrid fingerprinting engine — identify hosts without sending a single packet

Telegram OSINT, scraping and archival as a local web app. Multi-account collection, profile lookup with historic photos and change diffs, ten export…

This repository contains Velociraptor artifact and Chainsaw rules to help detect Microsoft Remote Access VPN activity

End-to-end SOC incident analysis and threat hunting playbook targeting Microsoft SharePoint privilege escalation (CVE-2023-29375) using SIEM logs,…

This repository is to demonstrate and practice my forensic/vulnerability analysis skills by reproducing a web-related CVE in a safe environment.

Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.