derduffy Goto Github PK

aleph

An Open Source Malware Analysis Pipeline System

api-samples

Samples code that uses QRadar API's

atomic-threat-coverage

Actionable analytics designed to combat threats based on MITRE's ATT&CK.

awesome-incident-response

A curated list of tools for incident response

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

binent

Cross-platform entropy calculation script with filtering and custom-block size options.

ce1sus

ce1sus, a threat information database

dcept

A tool for deploying and detecting use of Active Directory honeytokens

derduffy

derduffy.github.io

det

(extensible) Data Exfiltration Toolkit (DET)

dfirtriage

Digital forensic acquisition tool for Windows based incident response.

fir

Fast Incident Response

firemisp

Stay tuned

flare-ida

IDA Pro utilities from FLARE team

httppwnly

"Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS

impacket

Impacket is a collection of Python classes for working with network protocols.

irm

Incident Response Methodologies

kerberoast

malware

Course materials for Malware Analysis by RPISEC

mbe

Course materials for Modern Binary Exploitation by RPISEC

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

misp-taxii--broken-

(broken) THIS TOOL IS NOT MAINTAINED AND NOT WORKING ANYMORE WITH MISP

northkoreadnsleak

Snapshot of North Korea's DNS data taken from zone transfers.

plaguescanner

Open source multiple AV scanner framework

pocs

Proof of Concepts for CVE-2016–3714

powershellery

This repo contains Powershell scripts used for general hackery.

signature-base

Signature base for my scanner tools

thehive

TheHive: a Scalable, Open Source and Free Incident Response Platform

thehive4py

Python API Client for TheHive