ForensicITGuy/forensicitguy.github.io
ForensicITGuy Blog
Repositories
ForensicITGuy/supply-chain-monitor
ForensicITGuy/Invoke-PartyParrot
Bringing the Party Parrot to PowerShell
ForensicITGuy/assemblyline-mcp
This server enables large language models to interact with Assemblyline v4+ components through a standardized interface for queries, actions, and automation.
ForensicITGuy/rhh-md5
Calculate the PE Rich Header MD5 hash
ForensicITGuy/libpreloadvaccine
Whitelisting LD_PRELOAD libraries using LD_AUDIT
ForensicITGuy/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
ForensicITGuy/LME
Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure.
ForensicITGuy/certReport
A tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
ForensicITGuy/sof-elk
Configuration files for the SOF-ELK VM
ForensicITGuy/Unprotect_Submission
Repository to publish your evasion techniques and contribute to the project
ForensicITGuy/handy-cti
Resources I've found useful for my CTI work
ForensicITGuy/malware-analysis-tools
ForensicITGuy/signature-base
YARA signature and IOC database for my scanners and tools
ForensicITGuy/CSharp-RunPE
Hide malware behind a legit process C#
ForensicITGuy/yara
The pattern matching swiss knife
ForensicITGuy/vscode-attack
Visual Studio Code extension for MITRE ATT&CK
ForensicITGuy/malware-analyst-crash-course
Malware Analyst Crash Course
ForensicITGuy/reverse-bytes
A simple Python 3 script to reverse the order of bytes in a file and write the result to a second.
ForensicITGuy/salt-states
This repository maintains the SaltStack state files for the REMnux distro.
ForensicITGuy/tools
Scripts and tools accompanying HP Threat Research blog posts and reports.
ForensicITGuy/python-decoding-sensor-data
ForensicITGuy/golang-temperature-converter-cli
ForensicITGuy/Find-Logons
PowerShell tool to lookup AD user info and track down account lockouts in AD domain
ForensicITGuy/clth-study-group
Scripts used for a Jupiter Broadcasting Command-Line Threat Hunting Study Group
ForensicITGuy/Clean-IISLogs
PowerShell tools to remove IIS logs according to retention policy