DetectionLab
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
configuration-auditingdefensive-toolsdigital-forensics+5
5.0k
clong/detectionlabAutomate the creation of a lab environment complete with security tooling and logging best practices
cyberdefenders/detectionlabelkDetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
yamato-security/enablewindowslogsettingsDocumentation and scripts to properly enable Windows event logs.
chainguard-dev/osquery-defense-kitProduction-ready detection & response queries for osquery
korben00/no-gdidRead, understand and silence the Windows GDID device identifier (the ID that tracked a hacker through a VPN). Verified on a real Win11 VM. Honest: it…
yamato-security/welaAudits Windows event log settings against best-practice guidelines and Sigma-rule detectability, with automated configuration for DFIR readiness.
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
twocanoes/auditAudit Preference Pane and Log Reader for OS X
kjean13/adftActive Directory Forensic Toolkit : Detect & reconstruct AD attacks from Windows event logs (EVTX)
eugexo/security-baseline-ubuntuProduction-grade Security Baseline & Hardening Guide for Ubuntu 24.04/26.04 LTS. Kernel isolation, Emergency Panic Button, custom AppArmor/Firejail…
asmitdesai/ubuntilsPython CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…
xe1phix/parrotlinux-public-kiosk-projectSystematic Linux kernel hardening project implementing KSPP-recommended settings, module blacklisting, and restricted environment configuration for…
sreckoskocilic/envocabularyTrace every shell environment variable to its exact file and line origin. Audit shell configs for dead entries, duplicates, and orphaned files across…
jithinkrishnanrs/stylesmuggler-ioc-toolkitStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells,…
ngksiva/cpanel-forensicsФорензика после CVE-2026-41940 (cPanel/WHM) — bash-скрипт и чек-лист
abdom.seada/security-checkslinux security checks
bjbakker1984/yellowkey-mitigationPowerShell script that automates the WinRE mitigation workflow for CVE-2026-45585, with verification steps and conditional commit to avoid…
ndaal_open_source/ndaal_public_auditdBest-practice Linux Auditd rule set with 14,956 MITRE ATT&CK-mapped rules, Ansible deployment role, and lint/test tooling for security monitoring and…