
MrHandler
SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…

SSH-based Linux incident response tool that executes diagnostic commands to collect network configs, logs, user accounts, and processes, then…

This project aims to compare and evaluate the telemetry of various EDR products.

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️

A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.


Cyber Threat Defense World Modeling

Analyzes Nginx access logs to detect SQL injection, scanner tools, webshells, and exploitation attempts, aiding system administrators in server…

Dockerized honeypot for CVE-2021-44228.


A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and…

PHP 8.4+ security library (mirror)

A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the…

Spring4Shell (CVE-2022-22965) DFIR lab with exploit simulation, Python WAF, IOC-based detection, and PCAP analysis.