Archived
HAFNIUM-IOC
soteria-security/hafnium-iocA PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865
digital-forensicsforensicsincident-response+3
soteria-security/hafnium-iocA PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865
mandiant/citrix-ioc-scanner-cve-2023-3519Bash-based scanner detecting indicators of compromise from CVE-2023-3519 exploitation on Citrix ADC appliances, supporting live and forensic image…
sucuri-labs/cve-2025-57819-ioc-checkThis is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
meirwah/awesome-incident-responseCurated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…
mvt-project/mvtForensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…
horsicq/detect-it-easyProgram for determining types of files for Windows, Linux and MacOS.
wireshark/wiresharkCapture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…
mandiant/flare-vmA collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
sbousseaden/evtx-attack-samplesCurated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
fabrimagic72/malware-samplesA collection of malware samples caught by several honeypots i manage
mattnotmax/cyberchef-recipesA list of cyber-chef recipes and curated links
google/turbiniaAutomation and Scaling of Digital Forensics Tools
perkins-fund/malware-bibleFree educational courses in cybersecurity, reverse engineering, malware analysis, and programming designed to expand access, build practical skills,…
andrewrathbun/dfirartifactmuseumThe goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact…
ion-storm/sysmon-configAdvanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic…