socologize Goto Github PK

aptnotes

Various public documents, whitepapers and articles about APT campaigns

atc-mitigation

Actionable analytics designed to combat threats based on MITRE's ATT&CK.

atc-react

A knowledge base of actionable Incident Response techniques

atomic-red-team

Small and highly portable detection tests.

atomic-threat-coverage

Actionable analytics designed to combat threats based on MITRE's ATT&CK.

awesome-elasticsearch

A curated list of the most important and useful resources about elasticsearch: articles, videos, blogs, tips and tricks, use cases. All about Elasticsearch!

awesome-osx-command-line

Use your OS X terminal shell to do awesome things.

awesome-python

A curated list of awesome Python frameworks, libraries, software and resources

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

brew

:beer: The missing package manager for OS X

bro-cheatsheets

Bro Log Cheatsheets

ccf-vm

CyLR CDQR Forensics Virtual Machine (CCF-VM): An all-in-one solution to parsing collected data, making it easily searchable with built-in common searches, enable searching of single and multiple hosts simultaneously

cdqr

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux and MacOS devices

cylr

CyLR - Live Response Collection Tool

deepbluecli

demos

Prototype Demo Code

dettect

Detect Tactics, Techniques & Combat Threats

email2pdf

Script to convert emails to PDF from the command-line, as well as detach recognized attachments. Helps to process incoming emails and assist automatically with a non-paper paperwork workflow. Designed to work in tandem with getmail to convert forwarded emails to PDF automatically.

falcon-orchestrator

CrowdStrike Falcon Orchestrator provides automated workflow and response capabilities

fir

Fast Incident Response

github-cheat-sheet

A list of cool features of Git and GitHub.

gophish

Open-Source Phishing Toolkit

grassmarlin

NSA Information Assurance tool that provides situational awareness for ICS/SCADA network security assessments. iadgov

helk

The Incredible HELK

honeyport

A powershell script for creating a Windows honeyport.

investigationplaybookspec

InvestigationPlaybookSpec

just-metadata

Just-Metadata is a tool that gathers and analyzes metadata about IP addresses. It attempts to find relationships between systems within a large dataset.

kansa

A Powershell incident response framework

maltrail

Malicious traffic detection system

nmap-parser-xml-to-csv

nmap-parser-xml-to-csv