
MozDef
DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

PDQ package for detecting CVE-2022-30190 (Follina) vulnerability by scanning registry keys (ms-msdt, search-ms) across Windows endpoints, enabling…

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications,…

Distributed & real time digital forensics at the speed of the cloud

Distributed alerting for the masses!

List of company advisories log4j

Indicator of Compromise Scanner for CVE-2019-19781

Tracking history of USB events on GNU/Linux

Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

Medium-interaction SSH honeypot that logs brute force attacks and full attacker shell interactions, with customization options to reduce…

Check ADC for CVE-2019-19781

RedEye is a visual analytic tool supporting Red & Blue Team operations

Read-only PowerShell module for detecting UNC2452 and other threat actor artifacts in Azure AD, auditing federated domains, service principals,…

CLI tools for forensic investigation of Windows artifacts

Graph platform for Detection and Response

Quick and dirty fix to OLE2 executing code via .hta

This is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819