GRR Rapid Response: remote live forensics for incident response
Repository Index
47,133 repositories indexed
25–48 of 180 · Most stars
Linux Runtime Security and Forensics using eBPF
Volatility 3.0 development
- digital-investigation
- forensics
- incident-response
- malware
Digging Deeper....
- incident-response
- forensics-investigations
- inventory-management
- endpoint-security
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
The Hunting ELK
- hunting
- elasticsearch
- kibana
- logstash
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Cloud Security Posture Management (CSPM)
Rapidly Search and Hunt through Windows Forensic Artefacts
- attack
- rust
- security
- threat-hunting
Collaborative forensic timeline analysis
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
- asn1
- x509
- certificate
- crl
Chrome extension and Express server that exploits keylogging abilities of CSS.
Manages application of security headers with many safe defaults
- secure-headers
- csp
- hsts
- referrer-policy
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
- sleuthkit
- tct
- ntfs
- forensics
OS X Auditor is a free Mac OS X computer forensics tool
HTTP Session Management for Go
- go
- golang
- session
- sessions
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Security sensor for realtime threat detection and protection
A collection of JavaScript engine CVEs with PoCs
- javascript
- cve
- vulnerability
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
Super timeline all the things
Rip web accessible (distributed) version control systems: SVN/GIT/HG...