Security sensor for realtime threat detection and protection
Repository Index
47,133 repositories indexed
25–48 of 97 · Most stars
Binary Analysis Platform
- binary-analysis
- reverse-engineering
- program-analysis
- static-analysis
Super timeline all the things
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The repository host gives no description.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
- anthropic
- audioworklet
- claude
- design-system
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
Collaborative Incident Response platform
- forensic
- incident-response
- csirt-tooling
- python
Fake Protocol Server
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
ICS/SCADA honeypot
- honeypot
- scada
- ics
- python
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
- incident-response
- forensics
- computer-forensics
- triage
PowerForensics provides an all in one platform for live disk forensic analysis
ThePhish: an automated phishing email analysis tool
Digital Forensics artifact repository
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).
- dfir
- dissect
- python
AVML - Acquire Volatile Memory for Linux
- rust
- memory-forensics
- linux-security
Generate smart and powerful wordlists
- wordlist
- password
- hacking-tool
- password-cracking
macOS (& ios) Artifact Parsing Tool
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
Digital Forensics Investigation Platform
- dfir
- security
- incident-response
- artifacts
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
- sigma
- python3
- evtx
- sigma-rules