This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team
☆20Oct 9, 2024Updated 2 years ago
Alternatives and similar repositories for IR-Cheatsheets
Users that are interested in IR-Cheatsheets are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- YARA Standalone WSS is an offline webshell scanning tool that uses YARA rules to detect malicious or suspicious files in webroot director…☆13Aug 4, 2025Updated last year
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago
- ☆13Mar 28, 2026Updated 7 months ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Aug 23, 2022Updated 4 years ago
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Power-Forensics is the Best Friend for Incident Responders to perform IR and collect evidences for Linux based host☆12Jun 2, 2023Updated 3 years ago
- A collection of useful, small python3 scripts for penetration testing/ethical hacking which I created over the years.☆10Aug 13, 2022Updated 4 years ago
- The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simp…☆38Nov 13, 2025Updated 11 months ago
- reverse engineered and improved BSQLi script from Coffinxp☆15Aug 30, 2024Updated 2 years ago
- ☆17Jul 23, 2026Updated 3 months ago
- Automating the baseline logging settings found here: https://nullsec.us/windows-baseline-logging/☆20Jan 28, 2025Updated last year
- Essential playbooks & runbooks for cybersecurity operations. A dynamic resource for security pros to navigate digital threats, with best …☆20Jun 23, 2026Updated 4 months ago
- Takajō (鷹匠) is a Hayabusa results analyzer.☆168Oct 25, 2026Updated 2 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)☆30Jun 24, 2014Updated 12 years ago
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆69Jul 7, 2025Updated last year
- This is a CS project that will encrypt shell code from msfvenom using AES☆23Mar 24, 2022Updated 4 years ago
- ☆75Oct 6, 2026Updated last month
- ☆29Nov 10, 2016Updated 9 years ago
- Klara docker compose☆11May 19, 2020Updated 6 years ago
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated 2 years ago
- Advanced Threat Hunting: Ransomware Group☆29Jul 9, 2025Updated last year
- API to use Cymru services☆27Dec 6, 2013Updated 12 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Claude Code plugin: audits Linux hardening posture and produces a risk-ranked report. 450+ checks — kernel, filesystem, privesc paths, eg…☆14Aug 14, 2026Updated 2 months ago
- About A comprehensive overview of FTK Imager, a forensic imaging tool for disk and memory acquisition, including usage guide☆36Oct 31, 2025Updated last year
- Sample evtx files to use for testing hayabusa detection rules☆72Nov 5, 2025Updated last year
- A package to create HTML MISP reports, including volume of trending events and attributes, evens received from key organisations and targ…☆12Oct 9, 2026Updated 3 weeks ago
- Analysis-oriented command line tool for remote execution and triage via EDRs API☆12Oct 3, 2025Updated last year
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆15Jul 23, 2020Updated 6 years ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- yara detection rules for hunting with the threathunting-keywords project☆171May 11, 2025Updated last year
- Rapid Large-Scale Hunting and Collection for Enterprise AD Networks☆10May 7, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated last year
- Explore the cyber realm with our concise collection! From Linux commands to XSS techniques, dive into incident response, bug bounty tips,…☆21Mar 6, 2024Updated 2 years ago
- Field guide to gather low-hanging fruits☆16Mar 20, 2025Updated last year
- Docker container for running CobaltStrike 4.10☆38Sep 18, 2024Updated 2 years ago
- ☆32Mar 11, 2026Updated 7 months ago
- A browser-based Digital Forensics and Incident Response (DFIR) tool for parsing, analyzing, and triaging FortiGate firewall logs.☆12Apr 11, 2026Updated 6 months ago
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 25, 2026Updated 2 weeks ago