DumpsterFire by TryCatchHCF
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
updated at Nov. 14, 2024, 8:49 a.m.
incident-response-docs by PagerDuty
PagerDuty's Incident Response Documentation.
updated at Nov. 14, 2024, 7:18 a.m.
APT-Hunter by ahmedkhlief
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
updated at Nov. 14, 2024, 4 a.m.
margaritashotgun by ThreatResponse
Remote Memory Acquisition Tool
updated at Nov. 14, 2024, 3:59 a.m.
PowerForensics by Invoke-IR
PowerForensics provides an all in one platform for live disk forensic analysis
updated at Nov. 13, 2024, 4:27 p.m.
streamalert by airbnb
StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
updated at Nov. 13, 2024, 1:36 p.m.
WELA by Yamato-Security
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
updated at Nov. 13, 2024, 1:35 p.m.
stringsifter by mandiant
A machine learning tool that ranks strings based on their relevance for malware analysis.
updated at Nov. 12, 2024, 1:17 p.m.
diffy by Netflix-Skunkworks
(DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
updated at Nov. 11, 2024, 10:34 p.m.