odin
hamza-megahed/odinCentralized IoC scanner that deploys Loki across endpoints, collects detection results, and parses logs into CSV for incident response and forensic…
defensive-toolsforensicsincident-response+2
hamza-megahed/odinCentralized IoC scanner that deploys Loki across endpoints, collects detection results, and parses logs into CSV for incident response and forensic…
adityabhatt3010/react2shell-cve-2025-55182-the-deserialization-bug-that-broke-the-webReact2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables…
eyesecurity/wp2shell-compromise-scanner-pluginRead-only WordPress plugin that scans for artifacts of the wp2shell exploit chain (CVE-2026-63030 / CVE-2026-60137)
aquibpro/forensix-studioForensic intelligence platform that analyzes files, correlates threat indicators, maps behavior to MITRE ATT&CK, and generates actionable security…
ma1am/cve-2022-26134-exploit-detectionThis repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux…
niklasmato/fortileak-01-2025-beThis repository contains informaion about the Fortigate firewall vulnerability (CVE-2022-40684) and affected data that were publicly disclosed by the…
opencve/opencveAggregate, filter, and track CVEs from multiple sources with team collaboration, custom dashboards, alerts, and AI-powered analysis for vulnerability…
magicsword-io/loldriversCurated database of vulnerable and malicious Windows drivers with YARA, Sigma, ClamAV, and Sysmon detection rules for proactive threat hunting and…
kevthehermit/ratdecodersPython Decoders for Common Remote Access Trojans
tsale/awesome-dfir-skillsA curated collection of DFIR skills and workflows for InfoSec practitioners.
toborrm9/malicious_extension_sentryMalicious Extension Database
eclecticiq/opentaxiiTAXII server implementation in Python from EclecticIQ
homas/ioc2rpzioc2rpz is a place where threat intelligence meets DNS.
cado-security/dfir_resources_revil_kaseyaResources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
opensourcemalware/vercel-april2026-incident-responseThis is an incident response playbook we created for the Vercel April 2026 compromise
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
