
scripts
Collection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…

Collection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

A collection of scripts for processing network forensics type data and intelligence, mainly into a postgres database.

Collection of Google Cloud solution examples and operational utilities for audit log monitoring, DLP de-identification, encryption key management,…

Curated collection of Windows EVTX attack samples mapped to MITRE ATT&CK techniques, designed for testing detection scripts, DFIR training, and…

Collection of KQL queries

A collection of scripts which may come in handy during your freedom fighting activities.

A curated collection of DFIR skills and workflows for InfoSec practitioners.

A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon

Curated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…

A Software as a Service (SaaS) log collection framework.

Searches For Threat Hunting and Security Analytics

Sigma-based detection rules, log queries, atomic tests, and response procedures for monitoring and threat hunting in GitLab environments.

A repository to release detection rules to the public

Sigma Rule for CVE-2025-49666

Python CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…

Curated index of incident response and DFIR tools, including memory and disk forensics, evidence collection, log analysis, playbooks, and educational…

Incident Response collection and processing scripts with automated reporting scripts