mutablesecurity by MutableSecurity
CLI program for automating the setup, configuration, and use of cybersecurity solutions
created at March 15, 2022, 11:25 a.m.
APT-Hunter by ahmedkhlief
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
created at Dec. 26, 2020, 9:52 p.m.
CAPEv2 by kevoreilly
Malware Configuration And Payload Extraction
created at Oct. 15, 2019, 6:16 p.m.
stringsifter by mandiant
A machine learning tool that ranks strings based on their relevance for malware analysis.
created at Sept. 5, 2019, 1:02 p.m.
MalConfScan by JPCERTCC
Volatility plugin for extracts configuration data of known malware
created at April 22, 2019, 12:23 a.m.
pyarascanner by nogoodconfig
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
created at May 3, 2018, 11:49 a.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
created at May 1, 2018, 10:11 p.m.
artifacts-kb by ForensicArtifacts
Digital Forensics Artifacts Knowledge Base
created at Jan. 17, 2018, 7:31 p.m.
LogonTracer by JPCERTCC
Investigate malicious Windows logon by visualizing and analyzing Windows event log
created at Nov. 24, 2017, 6:07 a.m.
metta by uber-common
An information security preparedness tool to do adversarial simulation.
created at Nov. 1, 2017, 9:24 p.m.
DumpsterFire by TryCatchHCF
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
created at Oct. 5, 2017, 11:44 p.m.