spacesiren
spacesiren/spacesirenA honey token manager and alert system for AWS.
cloud-securitydefensive-toolsincident-response+1
321
spacesiren/spacesirenA honey token manager and alert system for AWS.
bsi-bund/rdpcachestitcherRdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
lethal-forensics/collect-memorydumpAutomated PowerShell script for forensically sound Windows memory acquisition, including crash/raw dumps, pagefile collection, triage artifacts, and…
hashicorp-forge/groveA Software as a Service (SaaS) log collection framework.
ajmartel/irtriageIncident Response Triage - Windows Evidence Collection for Forensic Analysis
cronup/malware-iocsCollects and organizes malware indicators of compromise (IOCs) for rapid threat detection, incident response, and actionable intelligence sharing.
malwaretech/citrixhoneypotDetect and log CVE-2019-19781 scan and exploitation attempts.
abdulrhmanalfaifi/fennecArtifact collection tool for *nix systems
cloud-sniper/cloud-sniperDetection-as-code platform that automates cloud security incident response by correlating artifacts, analyzing IOCs, and orchestrating…
sandflysecurity/sandfly-entropyscanEntropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…
threatlabz/iocsCurated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…
hybridbrothers/hunting-queries-detection-rulesThe purpose of this repository is to share KQL queries to help identify security misconfigurations, hunt for specific patterns, or detect malicious…
mazx0p/threathoundAutomated threat hunting and incident response tool for Windows Event Logs with Sigma rule integration, real-time detection, and forensic artifact…
dsnezhkov/racketeerAgent-based ransomware simulation toolkit for controlled detection testing across Windows endpoints and network assets, with a cross-platform…
thomasareed/pictModular incident response toolkit for collecting forensic data from potentially infected macOS endpoints, capturing browser artifacts, persistence…
blueteam0ps/memoptixA Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.
lethal-forensics/macos-collectormacos-collector - Automated Collection of macOS Forensic Artifacts for DFIR
lawiet47/autoresponderAutomates incident response tasks via Carbon Black Response API: file/registry deletion, process killing, sensor isolation, binary collection, and…