This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team
☆20Oct 9, 2024Updated last year
Alternatives and similar repositories for IR-Cheatsheets
Users that are interested in IR-Cheatsheets are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Mar 28, 2026Updated 5 months ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Aug 23, 2022Updated 4 years ago
- Passivedns monitor implementation in Rust.☆12Apr 21, 2016Updated 10 years ago
- A summary of the most abbreviations I encountered so far☆29Aug 20, 2026Updated 2 weeks ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 10 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆17Jul 23, 2026Updated last month
- Sharing Threat Hunting runbooks☆27Jul 5, 2019Updated 7 years ago
- This tool can gather a lot of info without any defender alerts. It is useful for Penetration testers, SOC Analysts, System administrators…☆30Aug 25, 2026Updated 2 weeks ago
- Essential playbooks & runbooks for cybersecurity operations. A dynamic resource for security pros to navigate digital threats, with best …☆19Jun 23, 2026Updated 2 months ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- Have you ever wanted to search a link or IP address on multiple OSINT pages at once?☆66Jul 7, 2025Updated last year
- Notes for the CRTO exam☆10May 22, 2022Updated 4 years ago
- Quick & dirty script to get info on a file from online resources (VirusTotal, Team Cymru, Shadow Server etc.)☆30Jun 24, 2014Updated 12 years ago
- This is a CS project that will encrypt shell code from msfvenom using AES☆23Mar 24, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CrlfiX☆22Jan 30, 2025Updated last year
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated last year
- ☆29Nov 10, 2016Updated 9 years ago
- API to use Cymru services☆27Dec 6, 2013Updated 12 years ago
- A collection of reports and case studies to understand the threat landscape for UK critical infrastructure☆39Jan 23, 2024Updated 2 years ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆15Jul 23, 2020Updated 6 years ago
- Red Team Stored XSS SVG phishing-companion tool with the ability to serve a malicious login page, or clone an html page and implement cus…☆32Mar 31, 2023Updated 3 years ago
- Field guide to gather low-hanging fruits☆14Mar 20, 2025Updated last year
- Library of threat hunts to get any user started!☆51Sep 4, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Oct 22, 2025Updated 10 months ago
- ☆32Mar 11, 2026Updated 5 months ago
- Docker container for running CobaltStrike 4.10☆38Sep 18, 2024Updated last year
- A collaboration effort by the DFIR community to provide definitions (sometimes multiple) for common forensic terms!☆27Dec 1, 2022Updated 3 years ago
- ☆19Dec 23, 2024Updated last year
- ☆16Oct 24, 2024Updated last year
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 3 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 5 months ago
- Collection of over 9000 xss payloads | heavy xss collection☆12Dec 6, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A list of RMMs designed to be used in automation to build alerts☆121Nov 9, 2025Updated 9 months ago
- Find Microsoft Exchange instance for a given domain and identify the exact version☆190Jan 30, 2023Updated 3 years ago
- This is a Project Designed for Security Analysts and all SOC audiences who wants to play with implementation and explore the Modern SOC a…☆746Sep 23, 2024Updated last year
- APT hub, It help's research to collect information and data on the latest APT activities. It collects data on APT profiles, IOCs(1 yr), a…☆56Mar 11, 2025Updated last year
- A proving grounds for young and aspiring BBOT modules☆15Apr 1, 2026Updated 5 months ago
- Vagrant Files to create a Virtualbox VM for Malware Analysis☆13Jun 1, 2021Updated 5 years ago
- Purpleteam scripts simulation & Detection - trigger events for SOC detections☆205Dec 20, 2024Updated last year