dfir · GitHub Topics

toniblyx / my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

翻译 - 用于AWS安全的开源工具列表：防御性，攻击性，审计，DFIR等。

cloud auditing incident-response aws-inventory iam dfir cloudtrail aws-infrastructure aws-lambda 安全

Shell 9.11 k

4 个月前

meirwah / awesome-incident-response

#Awesome#A curated list of tools for incident response

incident-response 安全 Cybersecurity dfir Awesome Lists list incident-response-tooling

7.97 k

8 个月前

LOLBAS-Project / LOLBAS

#夺旗赛 (CTF) 和网络安全资源#Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lolbins redteam blueteam purpleteam dfir living-off-the-land

XSLT 7.36 k

25 天前

zeek / zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

翻译 - Zeek是功能强大的网络分析框架，与您可能知道的典型IDS有很大不同。

bro network-monitoring pcap 安全 nsm dfir zeek

C++ 6.71 k

4 小时前

clong / DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

翻译 - Vagrant＆Packer脚本可构建带有安全工具和记录最佳实践的完整实验室环境

Vagrant vagrantfile packer Cybersecurity lab-environment dfir Terraform Ansible PowerShell detection osquery sysmon dfir-automation

HTML 4.7 k

8 个月前

cugu / awesome-forensics

⭐️ A curated list of awesome forensic analysis tools and resources

computer-forensics digital-forensics forensic-analysis dfir Open Source 免费

4.18 k

2 天前

OTRF / ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

翻译 - 威胁猎人的剧本，有助于发展狩猎活动的技术和假设。

threat-hunting sysmon hunting-campaigns hypothesis hunting dfir hunter mitre-attack-db mitre

Python 4.14 k

1 年前

intelowlproject / IntelOwl

IntelOwl: manage your Threat Intelligence at scale

翻译 - 英特尔®猫头鹰：从单个API大规模分析文件，域，IP

安全 Python threat-intelligence IoC (Disambiguation)incident-response cyber-threat-intelligence enrichment honeynet OSINT osint-python threatintel malware-analysis threat-hunting Hacktoberfest cyber-security Cybersecurity threathunting dfir

Python 4.05 k

13 分钟前

TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

翻译 - TheHive：可扩展，开源和免费的安全事件响应平台

Scala 3.57 k

2 年前

Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner

Python yara signature scanner IoC (Disambiguation)antivirus hash yara-rules dfir

Python 3.49 k

4 个月前

Security-Onion-Solutions / security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

intrusion-detection log-management ids nsm hunting dfir

3.09 k

4 年前

WithSecureLabs / chainsaw

Rapidly Search and Hunt through Windows Forensic Artefacts

翻译 - 快速搜索和搜寻 Windows 事件日志

attack Rust 安全 threat-hunting blueteam chainsaw detection dfir forensics logs sigma Windows countercept

Rust 3.07 k

2 个月前

JPCERTCC / LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

翻译 - 通过可视化和分析Windows事件日志来调查恶意Windows登录

安全 dfir JavaScript 可视化 active-directory event-log blueteam Python

Python 2.85 k

9 个月前

olafhartong / sysmon-modular

A repository of sysmon configuration modules

sysmon dfir threat-hunting mitre-attack modular 安全

PowerShell 2.74 k

7 个月前

google / timesketch

Collaborative forensic timeline analysis

forensics dfir 安全 timeline analysis

Python 2.7 k

1 天前

Neo23x0 / signature-base

YARA signature and IOC database for my scanners and tools

signature yara-rules IoC (Disambiguation)scanner yara anti-virus hash threat-hunting threat-intelligence dfir

YARA 2.57 k

12 天前

Yamato-Security / hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

dfir threat hunting Windows event logs Rust sigma detection attack forensics incident response 安全 Cybersecurity incident-response security-automation threat-hunting

Rust 2.49 k

6 小时前

sbousseaden / EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

翻译 - Windows 事件攻击示例

threat-hunting evtx windows-security mitre-attack detection-engineering dataset winlogbeat dfir

HTML 2.31 k

2 年前

mattnotmax / cyberchef-recipes

A list of cyber-chef recipes and curated links

翻译 - 网络厨师食谱和精选链接列表

cyberchef Malware dfir incident-response data-manipulation cyberchef-recipes Regular expression

2.07 k

9 个月前

yeti-platform / yeti

Your Everyday Threat Intelligence

Cybersecurity threatintel threat-sharing threat-hunting enrichment intelligence dfir

Python 1.82 k

2 天前