caar2000 Goto Github PK

ail-framework

AIL framework - Analysis Information Leak framework

alert_manager

Extended Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features

analysis

Test

aptnotes

Various public documents, whitepapers and articles about APT campaigns

blocklist-ipsets

ipsets dynamically updated with firehol's update-ipsets.sh script

blockwindows

Stop Windows 10 Nagging and Spying. Works with Win7-10

blue

Scripts that are suited for blue teams

bro-scripts

Various Bro scripts

combine

Tool to gather Threat Intelligence indicators from publicly available sources

data_hacking

Click Security Data Hacking Project

dns-exfiltration

Exfiltrate files via DNS

dnsdb-query

DNSDB query scripts

dshell

Dshell is a network forensic analysis framework.

element53

Element53

fido

fir

Fast Incident Response

grr

GRR Rapid Response: remote live forensics for incident response

hammer

A web vulnerability scanner framework

honeypy

A low interaction honeypot.

kali-cloud-build

Script to create Kali Linux Amazon Machine Images (AMIs)

kippo

Kippo Fork with additional features including SFTP support, direct-tcp, exec stdin logging, ssh algorithm update, json logging, etc

loki

Loki - Simple IOC and Incident Response Scanner

malcom

Malcom - Malware Communications Analyzer

maltego

Maltego transforms for all sorts of things

maltrieve

A tool to retrieve malware directly from the source for security researchers.

malware

检测

neolog

Windows Syslog Command Line Client

oscarf-public

Python tool to aid in the collection of OSINT data

osint-scripts

otx-python-sdk

Open Threat Exchange is an open community that allows participants to learn about the latest threats, research indicators of compromise observed in their environments, share threats they have identified, and automatically update their security infrastructure with the latest indicators to defend their environment.