Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
A Powershell incident response framework
A repository of namespaced, composable shell (bash, sh and dash) function libraries. Takes aware the pain of shell scripting, making it robust and reusable. Includes secure curl usage, JSON, XML and Debian control file parsers, dependency documentation via attributes, and more. Batteries ARE included.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
RTS: request to struct. Generates Go structs from JSON server responses.
- rts
- json-server
- cli
- json
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
Commandline interface in browser for Symfony2
- symfony
- php
- bundle
- symfony-bundle
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
A lightweight, flexible, and safer alternative to chroot and/or Docker.
- chroot-environment
- chroot
- linux
- namespace
PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.
- powershell
- powershell-modules
- incident-response
- containment
Simple bash script to annotate an ESP32 exception backtrace with source code info
- esp32
- esp32-arduino
Alternative CLI tool and Go package for NodeMCU-based modules.
- esp8266
- nodemcu
- nodemcu-esp8266
- golang
a db migration management CLI and library
- database-migrations
- schema-migrations
- cassandra
- mysql
Command line interface for working with waves RIDE language
- waves
🫠 Your MacBook has feelings. Every hardware event triggers a personality response.
- accelerometer
- apple-silicon
- cli
- fun
CLI tilesheet splitter in Py3
- tilesheet
- tiles
- python
- python3