
Sealighter
ETW and WPP tracing tool for security research. Subscribes to multiple providers, auto-parses events to JSON, and supports advanced filtering,…

ETW and WPP tracing tool for security research. Subscribes to multiple providers, auto-parses events to JSON, and supports advanced filtering,…

Detection Script for MongoBleed Exploitation

Audit Guide for the Citrix ADC Vulnerability CVE-2019-19871. Collected from multiple sources and threat assessments. Will be updated as new methods…

Open-source blue team tool that protects Linux and Windows systems using multiple host and network defense and detection methods.

File integrity monitoring tool that detects unauthorized changes to monitored files and directories using attribute checks, multiple hash algorithms,…

Provides BigFix Fixlets and analyses to detect Log4j vulnerabilities (CVE-2021-44228, CVE-2021-45046, CVE-2021-45105) across Windows and Linux…

create cypher create statements for neo4j out of netstat files from multiple machines

Daemon to ban hosts that cause multiple authentication errors

** DISPUTED ** 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the…

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

a terminal UI to browse bbot reports