
VISION-ProcMon
A ProcessMonitor visualization application written in rust.

A ProcessMonitor visualization application written in rust.

Extensible Azure Security Tool - Documentation

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Automate the creation of a lab environment complete with security tooling and logging best practices

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

Rapidly Search and Hunt through Windows Forensic Artefacts

Multi-threaded Windows event log forensics timeline generator and threat hunting tool with full Sigma rule support, producing CSV/JSON timelines for…

Digital forensics engine that parses logs, files, and system artifacts to build super timelines, enabling chronological event correlation for…

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Curated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…

PowerShell-based threat hunting tool that analyzes Windows Event Logs to detect malicious activity including credential attacks, obfuscated commands,…

Parses iOS and iPadOS forensic extractions into HTML, TSV, timeline, KML, and LAVA reports with modular artifact discovery and encrypted iTunes…

A list of cyber-chef recipes and curated links

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of…

A curated list of awesome Security Hardening techniques for Windows.

Automated IP ban service that detects failed login attempts from event logs and files, blocking attackers on Windows and Linux via firewall…