
aide
File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

FWT is a security analysis and file monitoring tool that utilizes Sysmon events.

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity

Advanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…

Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring

Telegram intelligence collection tool for researchers and investigators. Scrapes groups, messages, media, and user data with OCR, Elasticsearch…

A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF (Extended Berkeley Packet Filter) to…

Encrypted peer-to-peer mesh VPN for remote mobile forensics, enabling wireless ADB and libimobiledevice acquisition, network monitoring, and…

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Transparent man-in-the-middle proxy that terminates SSL/TLS connections, forges certificates on-the-fly, and logs decrypted traffic for network…

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

Redirect All Traffic Through Tor Network For Kali Linux

Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…

Wireshark plugin for dissecting the Telegram protocol

Lua-based Wireshark postdissector that decrypts and parses Ubiquiti AirMAX/RouterBoard 802.11 vendor IEs into filterable fields.

chat log tool, easily use your own chat data. 聊天记录工具,轻松使用自己的聊天数据

Rust tool to detect cell site simulators on an orbic mobile hotspot