
memhunter
Live hunting of code injection techniques

Live hunting of code injection techniques

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

Cross-platform Yara scanner written in Go

Scanner for CVE-2024-4040

OSINT intelligence on any IP, domain, or ASN

Ransomware leak site monitoring

Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)

Hands-on analysis of common APT attack techniques, focused on how they show up in logs and how defenders can realistically detect them.

Collaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…

Cortex: a Powerful Observable Analysis and Active Response Engine

Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Forensic collection and analysis toolkit for Android and iOS devices to identify potential compromise by known spyware using public and private…

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Curated list of threat detection and hunting resources: detection rules, SIEM and log analysis tools, endpoint/network monitoring, datasets,…

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…