Sandia Cyber Omni Tracker (SCOT)
- perl
- javascript
- cyber-security
- incident-response
Repository Index
47,133 repositories indexed
49–68 of 68 · Most stars
This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
HEhub is a library for homomorphic encryption and its applications, and is part of the PrimiHub project.
- bgv
- ckks
- cryptography
- fhe
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
analyze a web-based network traffic 🕶 to detect central command and control servers
- squid
- network-traffic
- proxy-server
- incident-response
Defensomania is a security monitoring and incident response card game.
- incident-response
- self-assessment
- incident-response-readiness
- educational-game
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
- golang
- go
- supply-chain
- security
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Fast incident overview
PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
- powershell
- powershell-modules
- incident-response
- containment
Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.
- aes-256
- aes-256-gcm
- browser-encryption
- client-side-encryption
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
- 2fa
- aes-gcm
- dotenv
- encryption
The repository host gives no description.
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.