Azr43lKn1ght / DFIR-LABS
DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting.
☆176Updated last week
Alternatives and similar repositories for DFIR-LABS:
Users that are interested in DFIR-LABS are comparing it to the libraries listed below
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆147Updated 5 months ago
- CLI tools for forensic investigation of Windows artifacts☆325Updated 4 months ago
- This is a repository dedicated to the DFIR journey. Contains notes, reflections and links to tools.☆64Updated this week
- ☆156Updated last year
- A collection of CVEs weaponized by ransomware operators☆104Updated last month
- A repository of credential stealer formats☆198Updated last month
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆151Updated 9 months ago
- Completely Risky Active-Directory Simulation Hub☆99Updated last year
- A repository of advice and guides to share with friends and family who are concerned about their safety during online activities and the …☆120Updated last year
- ☆167Updated 11 months ago
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆118Updated last month
- Jupyter Notebooks for the Blue Team☆145Updated 2 years ago
- Free training course offered at Hack Space Con 2023☆137Updated last year
- Harness the power of Splunk for your investigations☆92Updated 3 months ago
- Advanced Bash script designed for conducting digital forensics on Linux systems☆138Updated 10 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆118Updated 10 months ago
- Dissecting and Defeating Ransomware's Evasion Tactics Defcon 32☆11Updated 6 months ago
- DFIR project to collect and analyze events in Google Workspace☆12Updated 10 months ago
- ThreatSeeker: Threat Hunting via Windows Event Logs☆119Updated last year
- MISP Playbooks☆186Updated 2 weeks ago
- ☆133Updated last year
- Windows Malware Investigation Scripts & Docs☆74Updated 3 months ago
- An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.☆193Updated 8 months ago
- LOLAPPS is a compendium of applications that can be used to carry out day-to-day exploitation.☆180Updated last week
- Python tool to check rootkits in Windows kernel☆193Updated this week
- Some important DFIR Resources☆83Updated last year
- ☆416Updated this week
- A curated list of awesome LOLBins, GTFO projects, and similar 'Living Off the Land' security resources.☆141Updated 4 months ago
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆180Updated 2 months ago