
citrix-netscaler-cve-2026-88771-iocs
Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.


You didn't think I'd go and leave the blue team out, right?

A list of cyber-chef recipes and curated links

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

A tool for processing a lot of pcaps using tshark

A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

TCP/IP packet demultiplexer. Download from:

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

Offline-first network investigation and response platform for Windows. Turns a pcap or live capture into a full forensic verdict — attack story,…

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Malware samples, analysis exercises and other interesting resources.

A curated collection of DFIR skills and workflows for InfoSec practitioners.

Wireshark RDP resources