Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Repository Index
57,138 visible repositories in the index
433–456 of 816 · Most stars
A colleciton of CTF write-ups all using pwntools
Collection of example YARA-L rules for use within Google Security Operations
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
The repository host gives no description.
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
Catch risky npm dependency changes before they merge.
- dependency-analysis
- devsecops
- github-actions
- malware
Using Intel's PIN tool to solve CTF problems
- ctf
- pin
- reverse-engineering
- instruction-counting
A tool for deploying and detecting use of Active Directory honeytokens
dll injection tool that implements various methods
Volatility plugin for extracts configuration data of known malware
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- cybersecurity
- incident-response
- sysinternals
- nirsoft
Super Next generation Advanced Reactive honEypot
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Rest API boilerplate for Lumen micro-framework.
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Built-in Panther detection rules and policies
- security
- python
- cybersecurity
- siem
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools
Robust ABC (ActionScript Bytecode) [Dis-]Assembler
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection