kraken8585 Goto Github PK

aadinternals

AADInternals PowerShell module for administering Azure AD and Office 365

advancedhunting

Advanced Hunting Queries for Microsoft Security Products

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

artifacts

Digital Forensics Artifact Repository

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

autollr

Script to automate Linux live evidence collection

awesome-incident-response

A curated list of tools for incident response

awesome-malware-analysis

Defund the Police.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azuresentinel-cloudarchitekt

Sharing my KQL queries for Azure Sentinel

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

blueteam_homelabs

Great List of Resources to Build an Enterprise Grade Home Lab

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

csirt-jump-bag

CSIRT Jump Bag

decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

decodify

Detect and decode encoded strings, recursively.

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dfir_linux_collector

The Linux DFIR Collector is a stand-alone collection tool for Gnu / Linux. Dump artifacts in json format with very few impacts on the host system. Created for incident response Team.

docker

OpenCTI Docker deployment helpers

eml_analyzer

EML analyzer is an application to analyze the EML file

evilize

Parses Windows event logs files based on SANS Poster

ezetw

Cmdlets for capturing Windows Events

falcon-toolkit

Unleash the power of the Falcon Platform at the CLI

fvol

Wrapper script that will run volatility commands and save the output depending on the profile of the memory dump

get-duplicate-indicators