A Python script for extracting IP addresses, URLs, headers, and attachments from .eml files. Additional functionalities include defanging IPs and URLs, performing IP lookups, and attachment metadata extraction.
☆44Oct 10, 2024Updated last year
Alternatives and similar repositories for Email-IOC-Extractor
Users that are interested in Email-IOC-Extractor are comparing it to the libraries listed below
Sorting:
- Various short scripts and tools used for Digital Forensics☆14Apr 13, 2025Updated 11 months ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 3 months ago
- CLI generator for Velociraptor offline collector☆16Mar 6, 2026Updated 2 weeks ago
- Hunt the windows Registry automatically using VQL☆14Jan 6, 2026Updated 2 months ago
- Repository for sharing examples of our artifacts data and for use in new analyst recruitment.☆110Apr 22, 2025Updated 11 months ago
- https://academy.tcm-sec.com/☆14Aug 19, 2025Updated 7 months ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Dec 2, 2025Updated 3 months ago
- Network analysis with Wireshark, is the topic in this repo!☆14May 6, 2023Updated 2 years ago
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆64Dec 18, 2024Updated last year
- OFFZONE 2024 Malware Persistence workshop☆22Dec 18, 2024Updated last year
- This is a repository dedicated to the DFIR journey. Contains notes, reflections and links to tools.☆109Updated this week
- crawl a website for links and expose all the vulnerable parameters.☆14Oct 2, 2022Updated 3 years ago
- A curated repository of incident response playbooks☆120Jul 17, 2023Updated 2 years ago
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆20Feb 13, 2026Updated last month
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆33Sep 15, 2025Updated 6 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 2 years ago
- This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…☆26Oct 3, 2023Updated 2 years ago
- Public Archive for CSAW 2024 Quals☆11Sep 19, 2024Updated last year
- Red Teaming Tactics and Techniques☆13Feb 10, 2022Updated 4 years ago
- fsociety Hacking Tools Pack – A Penetration Testing Framework☆14Aug 8, 2024Updated last year
- ☆23Mar 21, 2024Updated 2 years ago
- ☆42Dec 24, 2024Updated last year
- Content Repo for Demystifying KQL Tutorial Series☆73Sep 1, 2024Updated last year
- DroidSniper - Misconfigured Android Debug Bridge Scanner☆14Mar 26, 2024Updated last year
- Contains compiled binaries of Volatility☆36May 18, 2025Updated 10 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆58Mar 2, 2025Updated last year
- A tool for automating network enumeration and reconnaissance☆18Jan 20, 2025Updated last year
- A list of the best cybersecurity research related blogs.☆33May 26, 2025Updated 9 months ago
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- KQL Queries for Advanced Hunting / Log Analytics☆13Jan 29, 2026Updated last month
- DEFCON 33 Workshop - Open Source Malware 101 - Everything you always wanted to know about npm malware (and more)☆15Aug 8, 2025Updated 7 months ago
- Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai & QBot) and other variants, high-impact exploits, ad…☆15Aug 22, 2024Updated last year
- Here are some common interview questions for an application security position you can review for your own interview, along with example a…☆31Apr 17, 2022Updated 3 years ago
- Ghosting-AMSI☆18Apr 30, 2025Updated 10 months ago
- CLI tool written in Go to generate Canary Tokens from https://canarytokens.org☆13Aug 22, 2025Updated 7 months ago
- This tool provides an interactive TUI for reviewing Nessus finding exports, running security tools (nmap, netexec, metasploit), and track…☆65Feb 5, 2026Updated last month
- A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN☆107Jan 26, 2026Updated last month
- ☆127Mar 7, 2026Updated 2 weeks ago
- Disk Image Mounting Script☆11Jan 22, 2026Updated 2 months ago