A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.
☆207Aug 11, 2026Updated 2 months ago
Alternatives and similar repositories for Invictus-AWS
Users that are interested in Invictus-AWS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆188Updated this week
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆242Oct 26, 2025Updated last year
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆864Jun 29, 2026Updated 4 months ago
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated 2 years ago
- A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.☆86Jan 6, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and secur…☆177Oct 4, 2026Updated 3 weeks ago
- Repository with supporting materials for Invictus Academy/Training☆45Jul 22, 2026Updated 3 months ago
- ☆75Oct 21, 2024Updated 2 years ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆235Oct 27, 2026Updated last week
- cloudgrep is grep for cloud storage☆335Mar 14, 2026Updated 7 months ago
- List of known AWS accounts☆269Jun 26, 2026Updated 4 months ago
- MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, fi…☆17May 26, 2026Updated 5 months ago
- A dataset containing Office 365 Unified Audit Logs for security research and detection☆67Aug 12, 2026Updated 2 months ago
- A library of Incident Response notebooks using Jupyter. We will show how you can leverage pre-defined notebook files to guide your incide…☆152Nov 15, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆59Sep 20, 2023Updated 3 years ago
- Tool for obfuscating and deobfuscating data.☆80Mar 20, 2024Updated 2 years ago
- Convert cloudtrail data to MITRE ATT&CK Sightings☆84Jul 25, 2022Updated 4 years ago
- This repository provides sample templates for security playbooks against various scenarios when using Amazon Web Services.☆679Updated this week
- ☆402Sep 25, 2023Updated 3 years ago
- Volatile Artifact Collector collects a snapshot of volatile data from a system. It tells you what is happening on a system, and is of par…☆254Nov 18, 2024Updated last year
- Aftermath is a free macOS IR framework☆602Sep 25, 2025Updated last year
- ☆30Jan 13, 2026Updated 9 months ago
- This repository contains the research and components of our research into using Sigma for AWS Incident Response.☆38Jul 12, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆684Oct 26, 2026Updated last week
- ☆15Oct 25, 2026Updated last week
- The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…☆282Feb 2, 2021Updated 5 years ago
- Granular, Actionable Adversary Emulation for the Cloud☆2,443Updated this week
- A PoC to Simulate Ransomware Attack on AWS Environment☆33Oct 14, 2024Updated 2 years ago
- PowerShell module for Office 365 and Azure log collection☆284Sep 22, 2025Updated last year
- The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)☆270Feb 3, 2022Updated 4 years ago
- YES3 Scanner: S3 Security Scanner for Access and Ransomware Protection☆104May 1, 2026Updated 6 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Memory Forensic System on Cloud☆93Dec 21, 2023Updated 2 years ago
- Generate datasets of cloud audit logs for common attacks☆246Oct 26, 2026Updated last week
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆25Oct 9, 2024Updated 2 years ago
- CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known…☆266Nov 21, 2025Updated 11 months ago
- Nextdoor's Cloud Security Posture Management (CSPM) Evaluation Matrix☆59Sep 7, 2023Updated 3 years ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆667Oct 24, 2026Updated last week
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 3 months ago