
whodunit
Recognizing the most likely APT groups responsible for an incident

Recognizing the most likely APT groups responsible for an incident


Check to see if your Palo Alto firewall has been compromised by running script againt support bundle.



A portable OSINT Swiss Army Knife for DFIR/OSINT professionals 🕵️ 🕵️ 🕵️

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

This is an incident response playbook we created for the Vercel April 2026 compromise

Repository containing the compromised certificate seen in recent CVE-2022-30190 (Follina) attacks.

Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity…

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

Collection of some easy of use tools - in powershell.

Program for determining types of files for Windows, Linux and MacOS.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

A free, open-source, and cross-platform iDevice management tool

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox