joaocmendonca Goto Github PK

acsc-challenges-2021-public

attackdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

awesome-pcaptools

A collection of tools developed by other researchers in the Computer Science area to process network traces. All the right reserved for the original authors.

bash_settings2

botdigger

Detecting DGA bots in a single network using DNS traffic

botsv1

botsv2

Splunk Boss of the SOC version 2 dataset.

botsv3

Splunk Boss of the SOC version 3 dataset.

cleaver

30-second slideshows for hackers

ctf-vagrant-64

cve-2015-7547

Proof of concept for CVE-2015-7547

cve-search

cve-search is a tool to import CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) into a MongoDB to facilitate search and processing of CVEs.

debian-vm-install

Debian unattended VM installation with virt-install and pressed.cfg

diagram-tools

A number of small tools for generating and manipulating diagrams, mostly based around Graphviz

dnsq

DNS Query Tool

docs

OPNsense documentation

dotfiles

A collection of dotfiles to store shortcuts and configuration of linux/unix tools.

entrada

Entrada big data for network data analytics

fastfluxanalysis

Scripts to detect Fast-Flux and DGA using DNS query responses

fixubuntu

original script from fixubuntu.sh

fluxender

Ender of Fast-Flux malicious domains.

fp-ngfw-exporter

Forcepoint NGFW Exporter (Azure Integration)

fp-ngfw-smc-ansible

ip2dns

iphone-dataprotection

jitsi-ansible

Bootstrap jitsi-meet with Ansible

joaocmendonca.github.io

Joao's DFIR notes

malware

Course materials for Malware Analysis by RPISEC

markbaggett