james-baud Goto Github PK

credmgr

Securely manage privileged account credentials via Shamir secret sharing

dfir

Digital Forensics and Incident Response

docker-forensics

Incident response environment

empire

Empire is a pure PowerShell post-exploitation agent.

flare-wmi

go-audit

go-audit is an alternative to the auditd daemon that ships with many distros

grr

GRR Rapid Response: remote live forensics for incident response

gryffin

Gryffin is a large scale web security scanning platform

helk

The Hunting ELK

kansa

A Powershell incident response framework

laikaboss

Laika BOSS: Object Scanning System

metasploit-framework

Metasploit Framework

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

osxcollector

A forensic evidence collection & analysis toolkit for OS X

plaso

Home of the super timeline

powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

protofuzz

Google Protocol Buffers message generator

pupy

Pupy is a remote administration tool with an embeded Python interpreter, allowing its modules to load python packages from memory and transparently access remote python objects. The payload is a reflective DLL and leaves no trace on disk

rekall

Rekall Memory Forensic Framework

security_monkey

Security Monkey

synfulknock

wmieventing

A PowerShell module to abstract the complexities of Permanent WMI Event Subscriptions

wmine