blue-infosec Goto Github PK

qiling

Qiling Advanced Binary Emulation Framework

qlog

Windows Security Logging

quickdraw-suricata

A set of ICS IDS rules for use with Suricata.

raccine

A Simple Ransomware Vaccine

radiocarbon

Leak File Analyzer

ransoblin

Ransoblin (Ransomware Bokoblin)

ransome-killer

This is the project on ransomeware detection using machine learning.

ransomware

A POC Windows crypto-ransomware (Academic)

rapid-response-reporting

RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provide accurate and timely feedback in the form of reports.

ratdecoders

Python Decoders for Common Remote Access Trojans

re

Reverse Engineering tools, scripts, and general commentary

real-timedetectionad_ver2

recomposer

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

reconstructer.org

Legacy repo of my discontinued reconstructer.org website with tools and papers from 2006 - 2013

redress

Redress - A tool for analyzing stripped Go binaries

refinery

High Octane Triage Analysis

reg_hunter

Blueteam operational triage registry hunting/forensic tool.

regtools

Window Registry Hive File Exploration Tools

rekcod

docker inspect :mag: → docker run :runner:

remediation

Tools and utilities for remediation and incident handling

remediation-scripts-library

This library includes a list of remediation PowerShell scripts that are offered to be used with Aternity

remediation_tracking_tool

Excel based tool to track the progress of a remediation project/program

remotewritemonitor

A tool to help malware analysts tell that the sample is injecting code into other process.

remove-old-activesync-devices-in-exchange

Use this script to find and remove old ActiveSync devices in Exchange

respounder

Respounder detects presence of responder in the network.

rhh-md5

Calculate the PE Rich Header MD5 hash

rhq

Recon Hunt Queries

richpe

Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks

ripvt

Virus Total API Maltego Transform Set For Canari

risky-tld-cluster-analysis

An Analysis Using DomainTools Threat Profile to Identify Risky TLDs