Jupyter Notebooks for the Blue Team
☆146Mar 21, 2025Updated last year
Alternatives and similar repositories for blue-jupyter
Users that are interested in blue-jupyter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Labs for Practical Malware Analysis & Triage☆1,182Mar 29, 2026Updated 7 months ago
- Jupyter Notebooks for the Blue Team☆39Jan 16, 2025Updated last year
- ☆11May 28, 2022Updated 4 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆98May 28, 2023Updated 3 years ago
- Reads and prints information from the website MalAPI.io☆22Jul 14, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆348Dec 3, 2025Updated 10 months ago
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- ☆12Jan 20, 2025Updated last year
- Linux Baseline and Forensic Triage Tool - BETA☆63Mar 10, 2026Updated 7 months ago
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆27Jun 30, 2021Updated 5 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- Notion as a platform for offensive operations☆1,172May 21, 2023Updated 3 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Semantic analysis with neural networks☆10Feb 18, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆16Mar 22, 2023Updated 3 years ago
- quASAR: ASAR manipulation made easy☆38Sep 7, 2022Updated 4 years ago
- WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.☆173Mar 30, 2025Updated last year
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆207Aug 11, 2026Updated 2 months ago
- ☆512Oct 7, 2024Updated 2 years ago
- KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunt…☆1,763Oct 13, 2026Updated 2 weeks ago
- A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.☆109Mar 12, 2026Updated 7 months ago
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆242Oct 26, 2025Updated last year
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Chrome Logs Events and Protobuf Parser☆38Dec 13, 2022Updated 3 years ago
- Python wrappers for mal_unpack☆37Sep 19, 2023Updated 3 years ago
- Practical Windows Forensics Training☆790Feb 16, 2026Updated 8 months ago
- CSIRT Jump Bag☆27Apr 25, 2024Updated 2 years ago
- You didn't think I'd go and leave the blue team out, right?☆1,784Sep 23, 2026Updated last month
- Memory Forensic System on Cloud☆93Dec 21, 2023Updated 2 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- These are installation notes based on Mayfly's installation notes. They are more streamlined for Vagrant as I did not take the Docker rou…☆27Jun 19, 2024Updated 2 years ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,085Oct 5, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hunting Malicious Macros SANS Threathunting Summit 2021 Materials☆39Oct 9, 2021Updated 5 years ago
- ☆68May 13, 2022Updated 4 years ago
- Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…☆2,147Dec 11, 2024Updated last year
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆216Jul 21, 2022Updated 4 years ago
- MBC content in markdown☆581Jun 12, 2025Updated last year
- Takajō (鷹匠) is a Hayabusa results analyzer.☆166Updated this week
- ☆13Jul 15, 2021Updated 5 years ago