Repository Index

A lifecycle model for describing incident management

Fast incident overview

PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.

• powershell
• powershell-modules
• incident-response
• containment

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Digital forensic (DFIR) specialist roadmap.

• chfi
• cyber-defense
• cyber-forensics
• dfir

3-level override system for Claude Code - prevents destructive system operations. Born from a real incident.

Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.

• bpf
• ebpf
• forensics
• goroutine