RedELK
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
defensive-toolsincident-responseinformation-gathering+4
2.7k
outflanknl/redelkRed Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
darkquasar/azurehunterA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
ctrlaltint3l/intelligenceCentralized repository for malware samples, threat intelligence, IOCs, and security tooling logs to support threat research and incident response…
zephrfish/cve-2025-53770-scannerToolShell scanner - CVE-2025-53770 and detection information
yossisassi/zerologon-exploitation-checkquick'n'dirty automated checks for potential exploitation of CVE-2020-1472 (aka ZeroLogon), using leading artifects in determining an actual…
k11h-de/bbot-uia terminal UI to browse bbot reports
teycir/diffcatcherA Rust CLI tool that recursively discovers Git repositories, captures state changes, generates diffs, extracts code elements with full snippets, and…
randomrobbiebf/cve-2023-47529Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File
rv4l3r3/log4v-vuln-checkThis script is used to perform a fast check if your server is possibly affected by CVE-2021-44228 (the log4j vulnerability).
tnich/honsshHonSSH is designed to log all SSH communications between a client and server.
mgeeky/decode-spam-headersA script that helps you understand why your E-Mail ended up in Spam
cyb3rfox/aurora-incident-responseIncident Response Documentation made easy. Developed by Incident Responders for Incident Responders
xephora/threat-remediation-scriptsThis repository contains a list of new remediation scripts.
zh54321/snafflerparserParses Snaffler output file and generate beautified outputs.
randomuserid/tyliumPrimary data pipelines for intrusion detection, security analytics and threat hunting
rootly-ai-labs/rootly-graphify-importerTurn Rootly incidents, alerts, and teams into a queryable knowledge graph. Visualize service dependencies, on-call coverage gaps, and cross-incident…
trinitor/netstat2neo4jcreate cypher create statements for neo4j out of netstat files from multiple machines