ctfbuster Goto Github PK

aws_ir

Python installable command line utiltity for mitigation of host and key compromises.

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

azuread-attack-defense

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

azurehunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

bad-date

This tool detects timestomping by analyzing the MAC timestampts

brim

Desktop application to efficiently search large packet captures and Zeek logs.

bytes_byte1

caldera

Automated Adversary Emulation Platform

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cdqr

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

chainsaw

Rapidly Search and Hunt through Windows Event Logs

cheatsheets

Collection of scripts, files, and tips to create and maintain networks, hack, and more!

cheatsheets-1

My cheatsheets

cloud-forensics-utils

Python library to carry out DFIR analysis on the Cloud

cloud-security-remediation-guides

Security Remediation Guides

cloudformationmulticloud

Add support for Azure and Google Cloud resources in CloudFormation.

cloudsploit

Cloud Security Posture Management (CSPM)

code-samples

complete-python-3-bootcamp

Course Files for Complete Python 3 Bootcamp Course on Udemy

content-lambda-boto3

Automating AWS with Lambda, Python, and Boto3

cs-video-courses

List of Computer Science courses with video lectures.

cs7038-malware-analysis

Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

cylr

CyLR - Live Response Collection Tool

dassana

Supercharge your alerts.

datacenterscalecomputing

Repository contains labs and Final Project

deepbluecli

detection-rules

Rules for Elastic Security's detection engine

detection-rules-1

Threat Detection & Anomaly Detection rules for popular open-source components

detection-rules-2

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API