jstnk9 / ETW-Almulahaza
ETW-Almulahaza is a consumer python-based tool that help you monitor ETW events of the operating system
☆12Updated 2 years ago
Related projects: ⓘ
- ☆34Updated last year
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Updated last year
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆14Updated 4 years ago
- Collection of scripts used to analyse malware or emails☆19Updated 3 years ago
- ☆14Updated last year
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆11Updated 3 years ago
- Yara rules☆18Updated last year
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 3 years ago
- Threat Box Assessment Tool☆19Updated 3 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- ☆15Updated 2 years ago
- Mass Triage Tools☆19Updated 2 months ago
- LNK to JSON☆14Updated 5 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆12Updated 4 years ago
- Site for IWS book content☆18Updated 5 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆32Updated 7 months ago
- OSSEM Modular☆27Updated 4 years ago
- Modular command-line threat hunting tool & framework.☆16Updated 4 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago
- A set of tools for collecting forensic information☆24Updated 4 years ago
- Generate YARA rules for OOXML documents.☆37Updated last year
- ☆40Updated 5 months ago
- Scripts to help hunt for possible golden/silver TGT tickets☆16Updated 7 years ago
- Links to malware-related YARA rules☆14Updated last year
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆21Updated 7 months ago
- Repository for LNK stuff☆27Updated 2 years ago
- PowerShell Memory Pulling script☆19Updated 9 years ago
- ☆19Updated last year
- Presentation materials for talks I've given.☆20Updated 4 years ago