DebugPrivilege / OpenProjectLinks
A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding quickly to security incidents.
☆37Updated last year
Alternatives and similar repositories for OpenProject
Users that are interested in OpenProject are comparing it to the libraries listed below
Sorting:
- A collection of tools, scripts and personal research☆155Updated this week
- ☆250Updated 8 months ago
- PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.☆109Updated last year
- A collection of CVEs weaponized by ransomware operators☆129Updated 3 months ago
- a tiny program to consume from ETW providers for research☆53Updated last year
- Baseline a Windows System against LOLBAS☆70Updated this week
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆92Updated last year
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆143Updated this week
- ☆24Updated 11 months ago
- Repository for sharing examples of our artifacts data and for use in new analyst recruitment.☆109Updated 9 months ago
- Expose a lot of MDE telemetry that is not easily accessible in any searchable form☆116Updated 5 months ago
- A collection of small scripts and tools for deobfuscation and malware analysis.☆66Updated 2 years ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆82Updated 9 months ago
- AppLocker Policy Generator☆25Updated 5 months ago
- MS Graph Commands and Tools for Blue Teamers☆52Updated 2 years ago
- A C# based tool for analysing malicious OneNote documents☆118Updated 2 years ago
- Repo that hold write-ups of various research projects I did and/or overall InfoSec things I investigated/researched.☆21Updated last year
- Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks.☆142Updated 5 months ago
- msuserstats is a comprehensive Powershell tool to manage accounts from Microsoft Entra ID and Active Directory. It supports: a unified vi…☆43Updated 10 months ago
- Project based on RegRipper, to extract add'l value/pivot points from TLN events file☆89Updated 11 months ago
- Powershell Linter☆86Updated last month
- ☆173Updated 2 years ago
- Your Browser-based EVTX Companion☆112Updated last week
- ☆180Updated 9 months ago
- A Windows Event Log MCP☆39Updated 5 months ago
- ☆54Updated 2 weeks ago
- ☆213Updated 2 months ago
- A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspe…☆33Updated 3 months ago
- A PowerShell variant of the amazing patch_review.py by kevthehermit☆178Updated 3 months ago
- ☆61Updated 2 years ago