
soc-automation-lab
Documented SOC automation workflow using Wazuh, N8N, Caldera, and Velociraptor

Documented SOC automation workflow using Wazuh, N8N, Caldera, and Velociraptor

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

Open-source forensics framework for analyzing Industrial PLC metadata and project files. Scans for suspicious artifacts in ICS environments to…

This project is a SIEM with SIRP and Threat Intel, all in one.

This project is now part of @mitmproxy.

A tool to listen on a KNX bus via TPUART and the Calimero Project suite and to dump the data from the packets into a Wireshark-Compatible file hex…

Systematic Linux kernel hardening project implementing KSPP-recommended settings, module blacklisting, and restricted environment configuration for…

Curated repository of live malware samples and source code for educational malware analysis and research, with an organized database and CLI tools…

Awesome-Cellular-Hacking

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

Rust tool to detect cell site simulators on an orbic mobile hotspot

No-root network monitor, firewall and PCAP dumper for Android

A curated list of cybersecurity tools and resources.

Curated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…

Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

The Open-Source AWS Cyber Range

Callstack scanner that identifies IOCs of unpacked or injected C2 agents by analyzing thread idle behavior, unbacked memory, module stomping, APCs,…