scripts
clausing/scriptsCollection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…
digital-forensicsforensicsincident-response+5
84
clausing/scriptsCollection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…
sigmahq/pysigmaPython library to parse and convert Sigma rules into queries (and whatever else you could imagine)
matthart1983/esshEnhanced SSH client with TUI — manage connections, keys, and sessions
lethal-forensics/memprocfs-analyzerAutomates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.
shellkraft/ledgerAn aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…
haplessidiot/ageverificationbypassBypass age verification service from redhat
farjadahmed/agentwatchSilent session recorder for Claude Code that logs every action, flags dangerous commands (rm -rf, sudo, curl|sh), and provides timeline review, risk…
olafhartong/sysmon-parserAutomatically generated Sysmon parser for Azure Sentinel
mthcht/purpleteamPurpleteam scripts simulation & Detection - trigger events for SOC detections
withsecurelabs/linuxcatscaleIncident Response collection and processing scripts with automated reporting scripts
wgetnz/cve-2024-3094-checkShell script to detect CVE-2024-3094 (xz-utils backdoor) on Linux and macOS systems, with automated check and fix instructions.
intezer/linux-explorerEasy-to-use live forensics toolbox for Linux endpoints
hyp3rlinx/pstrojanfileUnfixed Windows PowerShell Filename Code Execution POC
trinadh465/external_tcpdump_cve-2018-14880Command-line packet analyzer for network monitoring and data acquisition, capturing and displaying network traffic for troubleshooting and security…
corelight/phantom-playbooksAutomated security incident response playbooks for Splunk Phantom, integrating Zeek logs, DNS analysis, and VirusTotal threat intelligence to…
corelight/zeek2esA Python application to filter and transfer Zeek logs to Elastic/OpenSearch+Humio. This app can also output pure JSON logs to stdout for further…
intel-xeon/cve-2021-44228---detection-with-powershellPowerShell-based scanner to detect Log4j CVE-2021-44228 vulnerability by searching directories and log files for exploitation indicators.
chandru-gunasekaran/log4j-fix-cve-2021-44228Windows Batch Scrip to Fix the log4j-issue-CVE-2021-44228