DebugPrivilege / OpenProject
A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding quickly to security incidents.
☆16Updated last week
Related projects ⓘ
Alternatives and complementary repositories for OpenProject
- PowerShell PE Parser☆61Updated 4 months ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- Repository that contains random short projects like write-ups, PowerShell scripts, and more.☆26Updated this week
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆25Updated last month
- MS Graph Commands and Tools for Blue Teamers☆48Updated 11 months ago
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.☆15Updated 2 weeks ago
- Presentations from Conferences☆26Updated last month
- This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.☆14Updated last year
- ☆13Updated 6 months ago
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆34Updated last year
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆99Updated 4 months ago
- ☆44Updated last year
- Powershell Linter☆46Updated last month
- Contains compiled binaries of Volatility☆29Updated last month
- Yara Rules for Modern Malware☆67Updated 8 months ago
- ☆31Updated 2 years ago
- create a "simulated internet" cyber range environment☆13Updated last month
- ESXi Cyber Security Incident Response Script☆20Updated 2 months ago
- ☆48Updated last year
- ☆20Updated 11 months ago
- Simple PowerShell script to enable process scanning with Yara.☆90Updated 2 years ago
- ☆40Updated last year
- Process hunting Toolkit is toolkit capable of hunting down malicious processes on Windows☆11Updated 5 months ago
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆71Updated 2 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆49Updated 5 months ago
- Living off the False Positive!☆29Updated 2 months ago
- Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports☆39Updated this week
- ASR Configurator, Essentials and Atomic Testing☆36Updated last week