joeavanzato Goto Github PK

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

crackdown

Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.

demo-react-flask-mui-auth

Example React app utilizing MaterialUI with Flask JWT-authed API backend.

extcheck

File Signature Analysis Tool

eyeofthebeholder

iocfeed

joeavanzato.github.io

logboost

Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, Domain, ASN, DNS and Threat Indicator matches.

logongrabber

Remote retrieval, filtering and analysis of Security.evtx logs for user activity analysis.

macfuscator

Anti-Forensics Timeline Obfuscation Utility

malcommands

Documenting Suspicious Command Lines

netpeek

TCP Port Scanner, FTP Anonymous Login Query, UDP Flooding

outlooked-ioc

Tool for scanning an Outlook Inbox in order to discover Indicators of Compromise - intelligence dissemination/bulletins, *-ISAC Threads, etc,

packetsimulator

pmatch

Recursive file-hasher and string-matcher

portcheck

Use TCP or UDP to check connection availability for remote hosts

pyshares

SharpShares..but in Python!

pythonwebserver

quickscan

Hunting for Abnormalities

raid

Rapid Acqusition of Interesting Data

retrievir

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

simplescanner

Basic XSS, SQLi and LFI Vulnerability Scanner

threatsim

Threat Simulator for Enterprise Networks

trawler

PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

velociraptor-docs

Documentation site for Velociraptor

velociraptor-timeline-creator

VTC - Velociraptor Timeline Creator

ward

Windows Artifact Retrieval and Discovery

wingraph

Graph Visualizer for Windows Event Logs

wmihunter

Asynchronous Remote Evidence Retrieval for rapid network-wide threat hunting

yaracheck

Update and use YARA rules from across the Internet against targeted files or directories.