ThreatLens
abdaullahag/threatlensPython CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…
defensive-toolsincident-responseinformation-gathering+7
25
abdaullahag/threatlensPython CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan,…
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
adrecon/adreconPowerShell tool that extracts Active Directory artifacts via LDAP or ADWS and generates Excel reports for auditing, DFIR, and penetration testing.
zdhenard42/soc-multitoolA powerful and user-friendly browser extension that streamlines investigations for security professionals.
ab2pentest/macosthreattrackBash tool used for proactive detection of malicious activity on macOS systems.
zomato/viniferaA GitHub recon/monitoring tool for finding internal leaks belonging to your organisation.
viralmaniar/remote-desktop-caching-This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to…
tclahr/uacPortable, dependency-free incident response tool that automates forensic artifact collection from Unix-like systems, including memory acquisition,…
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
t0pcyber/hawkPowershell Based tool for gathering information related to O365 intrusions and potential Breaches
captaingeech42/ransomwatchRansomware leak site monitoring
sap8899/reportlyAzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…
nccgroup/impossibletravelloganalysisBasic log analysis tool to detect impossible travel via IP address geographic information
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
emrekybs/bluefishAutomation tool designed to simplify the analysis of PCAP (Packet Capture) files
rushyo/vindicatetoolLLMNR/NBNS/mDNS Spoofing Detection Toolkit
st2labs/sipiSimple IP Information Tools for Reputation Data Analysis
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.