NginxHunter
emrekybs/nginxhunterAnalyzes Nginx access logs to detect SQL injection, scanner tools, webshells, and exploitation attempts, aiding system administrators in server…
defensive-toolsincident-responselog-analysis+2
5
emrekybs/nginxhunterAnalyzes Nginx access logs to detect SQL injection, scanner tools, webshells, and exploitation attempts, aiding system administrators in server…
gamelinux/passivednsA network sniffer that logs all DNS server replies for use in a passive DNS setup
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
letsdefendio/simple-live-data-collectionClient-server tool for live data collection during incident response. Admin sends requests to clients to gather system information for forensic…
aws-alchemy/squidmagicanalyze a web-based network traffic 🕶 to detect central command and control servers
iomoath/filewatchtowerFWT is a security analysis and file monitoring tool that utilizes Sysmon events.
lawndoc/mediatorAn extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
softrams/bulwarkAn organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
mandiant/capaRule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
yamato-security/hayabusaMulti-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…
microsoft/procdump-for-linuxA Linux version of the ProcDump Sysinternals tool
jipegit/osxauditorOS X Auditor is a free Mac OS X computer forensics tool
sans-blue-team/deepbluecliPowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
mrwadams/attackgenAttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK…