timesketch
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
data-recoverydigital-forensicsdisk-forensics+7
3.4k
google/timesketchCollaborative forensic timeline analysis platform for ingesting, searching, and annotating event logs to support incident response and DFIR…
misp/misp-galaxyClusters and elements to attach to MISP events or attributes (like threat actors)
eh-amish/windows-defender-security-auditor-cve-2026-50656-Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…
misp/misp-taxonomiesTaxonomies used in MISP taxonomy system and can be used by other information sharing tool.
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
mthcht/awesome-listsCurated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.
virustotal/yara-xRust-based pattern matching engine for malware researchers. Create YARA rules with textual/binary patterns, wildcards, and regex to identify and…
tcbutler320/cve-2021-3441-checkCVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441
ry-allan/tanstack-compromise-checkerDetects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks…
onapsis/onapsis-mandiant-cve-2025-31324-vuln-compromise-assessmentSAP NetWeaver vulnerability and compromise assessment tool that detects CVE-2025-31324/42999, scans for IOCs, analyzes HTTP access and Java trace…
pedramamini/threatingestorAutomated threat intelligence aggregation tool that extracts and normalizes indicators from multiple sources (OSINT feeds, malware reports) into a…
onapsis/cve-2020-6287_recon-scannerBlack-box vulnerability scanner and indicator-of-compromise analyzer for CVE-2020-6287 (RECON) in SAP NetWeaver Java applications, enabling rapid…
rapticore/orenpmguardDefense Against the Shai-Hulud Supply Chain Attack
gyaansastra/cve-2022-30190Comprehensive analysis of CVE-2022-30190 (Follina MSDT vulnerability) with IOCs, detection rules for SIEMs/EDR, YARA signatures, mitigation scripts,…
cyberdudebivash/cyberdudebivash-cisco-asyncos-cve-2025-20393-scannerThis tool helps identify exposure to CVE-2025-20393 by checking for open TCP/6025 ports, responsive Spam Quarantine interfaces, and known…
archanchoudhury/msdt_cve-2022-30190This Repository Talks about the Follina MSDT from Defender Perspective
cspf-founder/darwis-taxiiA high-performance TAXII (Trusted Automated eXchange of Indicator Information) server written in Rust.
salaheldinfikri/kalim_backdoorKalim backdooe Malware Report