Tools

wortell/log4j

Repo containing all info, scripts, etc. related to CVE-2021-44228

sarjanpatel22/siem-threat-detection-lab

Blue-team SIEM lab: Wazuh 4.7.5 detecting 7 simulated attacks (SSH brute force, Slowloris DoS / CVE-2007-6750, web attacks) with real-time MITRE…

hexastrike/ivanti-connect-secure-logs-parser

A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282,…

madcdan/jndilookup

Some tools to help mitigating Apache Log4j 2 CVE-2021-44228

nate-ryan-7690/home_soc_suite

A personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…

tirreno/tirreno

Open security analytics.

jemhadar/mongobleed-dfir-triage-script-cve-2025-14847

The script focuses on safe artifact acquisition first, followed by optional on-host analysis, and produces a portable, hashed forensic archive…

azeemering/cve-2019-19781-dfir-notes

My Citrix ADC NetScaler CVE-2019-19781 Vulnerability DFIR notes.

lethal-forensics/memprocfs-analyzer

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

randomuserid/adama

Searches For Threat Hunting and Security Analytics

zh54321/snafflerparser

Parses Snaffler output file and generate beautified outputs.

ctxis/snitchdns

Database Driven DNS Server with a Web UI

zh54321/sharepointdumper

PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft…