
untitledgoosetool
Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

Basic log analysis tool to detect impossible travel via IP address geographic information

Zeek script using the official ICANN Top-Level Domain (TLD) list with the Input Framework to extract the relevant information from a DNS query and…

Zeek log enrichment tool that adds host information and known entity references to enhance network security monitoring and incident response.

ThreatSentry AI is an intelligent threat hunting dashboard that leverages machine learning to proactively identify and prioritize risks in your…

Cloud Templates & Patterns collection <= 1.2.2 - Sensitive Information Exposure via Log File

Restrict Content <= 3.2.7 - Information Exposure via legacy log file

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

Bash tool used for proactive detection of malicious activity on macOS systems.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

A modern and elegant dashboard for network traffic visualization and analysis.

Next-Gen GUI-based WiFi and Bluetooth Analyzer for Linux

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

A script that helps you understand why your E-Mail ended up in Spam

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8…

This repository contains a list of new remediation scripts.

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365