Repository Index

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker

Use Apple FaceID or TouchID authentication in your app using BiometricAuthentication.

• authentication
• faceid
• touchid
• biometric-identification

The reliable YouTube API Ruby client

• youtube-api
• youtube-analytics
• video
• ruby

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

• beacons
• blue-team
• c2
• command-and-control

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

:no_entry: (DEPRECATED) Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

• security
• dfir
• forensics

DFIRTrack - The Incident Response Tracking Application

• incident-response
• digital-forensics
• dfir
• incident-response-tooling

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

Remote forensics meta tool

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

A Linux packet crafting tool.

• packet-crafting
• networking
• hacking-tool
• intrusion-prevention

Forensics artefact collection tool for systems running Microsoft Windows

• dfir
• incident-response
• collection

Investigate suspicious activity by visualizing Sysmon's event log

• security
• kibana
• elasticsearch
• sysmon

A web front-end for password cracking and analytics

• python
• hashcat
• web
• flask

Cryptography Educational Foundations

• mathematics
• rustlang
• zero-knowledge
• cryptography

Hashcat web interface

• hashcat
• cracking
• analytics
• pentesting

inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques

• forensics
• hypervisor
• memory-dump
• reverse-engineering

Automated Tactics Techniques & Procedures

• empire
• tactics
• procedure
• cybersecurity

Web interface for the Volatility Memory Forensics Framework

Memory acquisition for Linux that makes sense.

The repository host gives no description.

Open Source SIEM (Security Information and Event Management system).

• siem
• risk-management
• risk-assessment
• vulnerability-management

Merge multiple pcap files together, gracefully.

• pcap
• merge
• tcpdump-capture
• packet-processing