blue-infosec Goto Github PK

eavesarp

Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)

ecs-mapping

Mapping Corelight or Zeek data to Elastic Common Schema fields

ee-outliers

Open-source framework to detect statistical outliers in Elasticsearch events

ektotal

[BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack

elastalert

Easy & Flexible Alerting With ElasticSearch

elastic-statistics

The python script uses Elastic stats API to periodically poll the elastic cluster and get important cluster parameters for determining cluster health.

elasticintel

Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.

electriceye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

elevation-of-privacy

Privacy Cards for Software Developers

elk-detection-lab

An ELK environment containing interesting security datasets.

email-header-analyzer

E-Mail Header Analyzer

emailrep.io-python

Python3 interface for the EmailRep API

eml_parser

python eml parser module

emocheck

Emotet detection tool for Windows OS

emotet-malware-killer

emotet_network_protocol

emotet_protection_tools

This repository provides tools to fight against Emotet malware. You can protect your system using these tools

endpoint-lockdown

:lock: Isolate a host from the network using PowerShell

engine

Droidefense: Advance Android Malware Analysis Framework

enscript-samples

This repository is a collection of EnScript code samples for use in the OpenText EnCase application.

enter_the_matrix

Tool for calculating risk associated with attack narratives defined and developed over the course of a risk assessment/red team operation.

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

epss

Exploit Prediction Scoring System (EPSS)

epsscall

EPSScall

ergo-pe-av

🧠 🦠 An artificial neural network and API to detect Windows malware, based on Ergo and LIEF.

ese-analyst

This is a set of tools for doing forensics analysis on Microsoft ESE databases.

evasions

evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

event-forwarding-guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

eventlist

EventList