ForensicMiner
securityjoes/forensicminerA really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
digital-forensicsdisk-forensicsforensics+2
164
securityjoes/forensicminerA really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
la3ar0v/tuxresponseAutomated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.
google/hashrBuilds forensic file hash sets from disk images, packages, and archives across GCP, AWS, and local sources, with deduplication and PostgreSQL/Spanner…
adamwhitehat/judge-jury-and-executableA file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV.…
reddrip7/log4shell_cve-2021-44228_related_attacks_iocsCurated repository of Indicators of Compromise (IOCs), attack source IPs, and Snort/Suricata detection rules for Log4Shell (CVE-2021-44228) attacks.
creeperhost/log4jpatcherA mitigation for CVE-2021-44228 (log4shell) that works by patching the vulnerability at runtime. (Works with any vulnerable java software, tested…
corelight/cve-2022-26809Zeek package detecting CVE-2022-26809 remote code execution attempts and successful exploitation over DCE/RPC, generating actionable exploit attempt…
qingtengyun/cve-2021-44228-qingteng-online-patchHot-patch CVE-2021-44228 by exploiting the vulnerability itself.
t-tani/yama-devYet Another Memory Analyzer for malware detection
zephrfish/cve-2025-53770-scannerToolShell scanner - CVE-2025-53770 and detection information
corelight/cve-2021-42292Zeek package detecting CVE-2021-42292 Microsoft Excel local privilege escalation exploit via network traffic analysis of spreadsheet downloads.
rfxn/cpanel-sessionscribeDetection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery…
zerozenxlabs/cve-2025-61882-oracle-ebsOperational exploit for CVE-2025-61882 in Oracle E-Business Suite, with research artifacts for defensive validation, detection engineering, incident…
0xblackash/cve-2026-48907CVE-2026-48907
onapsis/onapsis_cve-2025-31324_scanner_toolsPython-based scanner for CVE-2025-31324 that identifies vulnerable SAP NetWeaver Visual Composer instances and detects indicators of compromise from…
0x0allenace/windows-malware-behavioral-analysisBehavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…
securest8/npm-incident-responseScanner for the keyv/cacheable supply-chain attack: detects compromised npm packages, verifies payload hashes, and finds persistence implants in repo…
corelight/cve-2021-38647CVE-2021-38647 AKA "OMIGOD" vulnerability in Windows OMI