n3x77 Goto Github PK

ansible-tdd-development

Testing TDD Approach for creating ansible roles

ansible_timesketch

Ansible Playbook for production ready deployment of latest timesketch head

appcompatprocessor

"Evolving AppCompat/AmCache data analysis beyond grep"

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

awesome-event-ids

Collection of Event ID ressources useful for Digital Forensics and Incident Response

bloom

A highly efficient Bloom filter library and command line tool written in Go.

capev2

Malware Configuration And Payload Extraction

connectors

OpenCTI connectors

covid19-malware-sample-utils

Utilities for analysis and gathering of covid19 related malware samples

covid19-yara-rules

Yara Rule repository generated using YarGen from various OSINT sources to figth COVID19 malware campaigns

dfirtrack

DFIRTrack - The Incident Response Tracking Application

dfirtrack-api-python-client

A Python client library for accessing DFIRTracks API using the OpenAPI-Standard

dfirtrackapi

A go client library for accessing DFIRTracks API using the OpenAPI-Standard

docker_jenkins

face_matching

forensic-bloom-filters

This repository holds bloom filters that can be generated from various sources like NIST, MISP, etc. for quick lookups of hash sums

grr

GRR Rapid Response: remote live forensics for incident response

grr-doc

Documentation for the GRR Rapid Reponse framework

helper-scripts

Litte helpers in various scripting languages

jenkins-ansible-testing

lnav-thor

LNAV log formats for viewing THOR and SPARK log files.

malboxes

Builds malware analysis Windows VMs so that you don't have to.

munin

Online hash checker for Virustotal and other services

python-workshop

Files for programming exercises

rest-advanced_default

shuffle-apps

Apps to be used for Shuffle SOAR

signature-base

Signature base for my scanner tools

spyre

simple YARA-based IOC scanner

test

test

thorlite2dfirtrack

Create dfirtrack entries from thor lite scan reports