BruteRatel-DetectionTools
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
command-and-controldefensive-toolsincident-response+3
67
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
volatilityfoundation/volatilityAn advanced memory forensics framework
cristianzsh/forensictoolsCollection of forensic tools
a-poc/blueteam-toolsTools and Techniques for Blue Team / Incident Response
fabacab/awesome-cybersecurity-blueteam:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
invoke-ir/aceAutomated, Collection, and Enrichment Platform
horrister/moveit-transfer-cve-2023-34362Curated vulnerability research repository with in-depth writeups, PoC scripts, and IOC detection tools for real-world security incidents like…
synacktiv/veeam-velociraptorProof-of-concept Velociraptor artifacts pack to showcase a remote Veeam forensics pipeline.
withsecurelabs/linuxcatscaleIncident Response collection and processing scripts with automated reporting scripts
meirwah/awesome-incident-responseCurated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…
tonyphipps/meerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
executemalware/malware-iocsCurated collection of indicators of compromise extracted from real-world malware investigations, including hashes, domains, and IPs for threat…
bartblaze/yara-rulesCollection of private Yara rules.
tsale/awesome-dfir-skillsA curated collection of DFIR skills and workflows for InfoSec practitioners.
bushidouk/breach-report-collectionA collection of companies that disclose adversary TTPs after they have been breached
lethal-forensics/macos-collectormacos-collector - Automated Collection of macOS Forensic Artifacts for DFIR
sifalcon/detectionCurated collection of detection rules and IOCs extracted from DFIR engagements and malware analyses to support threat hunting, incident response, and…
fastfire/ioc_attack_esxi_feb_2023Collection of IoCs available and related to attacks on ESXi infrastructures that occurred as of Friday February 3, 2023.