Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Repository Index
47,133 repositories indexed
25–48 of 71 · Most stars
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
macOS (& ios) Artifact Parsing Tool
Audited & minimal JS implementation of hash functions, MACs and KDFs.
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Password hashing functions / KDFs
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
- oauth2
- openid
- openid-connect
- oidc
:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.
:white_check_mark: .NET crypto done right. Professionally audited.
- crypto
- cryptography
- c-sharp
- aead
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
DFIRTrack - The Incident Response Tracking Application
- incident-response
- digital-forensics
- dfir
- incident-response-tooling
🔒Unified API for password hashing algorithms
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
- cybersecurity
- incident-response
- sysinternals
- nirsoft
Forensics artefact collection tool for systems running Microsoft Windows
- dfir
- incident-response
- collection
A modern and easy-to-use cryptographic library for .NET based on libsodium
- aead
- aes-gcm
- blake2b
- chacha20-poly1305
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
- pbkdf2
- bcrypt
- scrypt
- argon2
A framework for orchestrating forensic collection, processing and data export
BadActor.org An in-memory application driven jailer written in Go
Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
- delphi
- key-deviation-algorithms
- cryptographic-checksums
- kdf1
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
- browser-fingerprinting
- cloudflare-workers
- dns-leak
- network-tools