
Meerkat
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

Collection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

A collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.

Curated collection of 961 malware families (1.36 GB) in password-protected ZIP archives, organized by family and type for analysis and research.

Collection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…

Collection of YARA signatures from individual research

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Collection of steganography tools - helps with CTF challenges

A collection of malware samples caught by several honeypots i manage

📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive…

Turn any collection of documents into a knowledge graph. Extract entities and relationships via LLM, deduplicate with your approval. Map domains,…

Collection of forensic tools

A collection of scripts which may come in handy during your freedom fighting activities.

A curated collection of DFIR skills and workflows for InfoSec practitioners.

Structured collection of 500+ Hack The Box machine writeups, 400+ challenge solutions, and interactive learning tools including knowledge graphs,…

Curated collection of cybersecurity learning resources, CTF writeups, research papers, and practical labs for hands-on skill development across web…

Collection of scripts for malware analysis, deobfuscation, and configuration extraction. Supports static analysis, unpacking, shellcode conversion,…