Ledger
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
command-and-controlincident-responselog-analysis+5
29
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
matthart1983/esshEnhanced SSH client with TUI — manage connections, keys, and sessions
withsecurelabs/linuxcatscaleIncident Response collection and processing scripts with automated reporting scripts
haplessidiot/ageverificationbypassBypass age verification service from redhat
intezer/linux-explorerEasy-to-use live forensics toolbox for Linux endpoints
intel-xeon/cve-2021-44228---detection-with-powershellPowerShell-based scanner to detect Log4j CVE-2021-44228 vulnerability by searching directories and log files for exploitation indicators.
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
corelight/phantom-playbooksAutomated security incident response playbooks for Splunk Phantom, integrating Zeek logs, DNS analysis, and VirusTotal threat intelligence to…
trinadh465/external_tcpdump_cve-2018-14880Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…
mthcht/purpleteamPurpleteam scripts simulation & Detection - trigger events for SOC detections
sigmahq/pysigmaPython library to parse and convert Sigma rules into queries (and whatever else you could imagine)
hyp3rlinx/pstrojanfileUnfixed Windows PowerShell Filename Code Execution POC
corelight/zeek2esA Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further…
olafhartong/sysmon-parserAutomatically generated Sysmon parser for Azure Sentinel
farjadahmed/agentwatchSilent session recorder for Claude Code that logs every action, flags dangerous commands (rm -rf, sudo, curl|sh), and provides timeline review, risk…
m0rath/detect-log4j-exploitableBash script to detect Log4j (CVE-2021-44228) exploitable systems by scanning running Java processes for vulnerable log4j-core components without…
chandru-gunasekaran/log4j-fix-cve-2021-44228Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228
wgetnz/cve-2024-3094-checkShell script to detect CVE-2024-3094 (xz-utils backdoor) on Linux and macOS systems, with automated check and fix instructions.