To parse ugly Microsoft DNS Logs....
☆41Jun 8, 2018Updated 8 years ago
Alternatives and similar repositories for DNSplice
Users that are interested in DNSplice are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An IOC framework written in PowerShell☆19Jan 3, 2017Updated 9 years ago
- Rapid Large-Scale Hunting and Collection for Enterprise AD Networks☆10May 7, 2025Updated last year
- Use DNS to hunt for threats including DGAs☆15Jan 4, 2016Updated 10 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- A collection of hunting and blue team scripts. Mostly others, some my own.☆38Jan 8, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆50Aug 30, 2020Updated 6 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Feb 20, 2024Updated 2 years ago
- Win32 utility for auditing TCP connections☆56Aug 25, 2020Updated 6 years ago
- Monitor the textual data pasted into Windows clipboard☆29Nov 4, 2018Updated 7 years ago
- ☆14Mar 9, 2023Updated 3 years ago
- Binary commandline executable to parse ETL files☆69Jun 7, 2018Updated 8 years ago
- small IR scripts for orgs using G Suite☆18Feb 27, 2019Updated 7 years ago
- ☆29Aug 9, 2016Updated 10 years ago
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆33Oct 7, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆320Aug 14, 2020Updated 6 years ago
- ATT&CK Remote Threat Hunting Incident Response☆203Dec 8, 2024Updated last year
- Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings☆123Jul 12, 2021Updated 5 years ago
- Zeek Auxiliary Programs☆28Updated this week
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆102Nov 17, 2020Updated 5 years ago
- ☆13Jul 15, 2024Updated 2 years ago
- An Inofficial Sysmon Version History (Change Log)☆33Oct 25, 2020Updated 6 years ago
- Automated forensics written in PowerShell☆33Sep 29, 2019Updated 7 years ago
- A threat hunting platform that turns Sigma detection rules into actionable OpenSearch queries, letting security analysts go from 'I need …☆12Dec 11, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆53May 21, 2018Updated 8 years ago
- ☆13Apr 6, 2016Updated 10 years ago
- The vulnerable recurrence docker environment for CVE-2022-44268☆10Feb 3, 2023Updated 3 years ago
- Personal settings for X-Ways Forensics☆36Apr 28, 2022Updated 4 years ago
- A PowerShell Drive Provider for reading Zipfiles☆15Feb 18, 2025Updated last year
- Windows Live Artifacts Acquisition Script☆195Jun 20, 2022Updated 4 years ago
- Tutorials, notes and walkthroughs about Android application security.☆12Nov 7, 2021Updated 4 years ago
- Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI☆202Dec 11, 2017Updated 8 years ago
- My Year of Python Repository☆28Jun 13, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This tool is meant to parse an NTFS $MFT file.☆15Mar 26, 2024Updated 2 years ago
- \ PowerAvails Powershell /☆10Jun 30, 2018Updated 8 years ago
- Basic raw packet sniffer in Python - Cybrary☆12Nov 21, 2017Updated 8 years ago
- Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.☆70Aug 7, 2020Updated 6 years ago
- A tool for checking a hash:pass pot file for hashes from a user:hash file☆12Oct 23, 2016Updated 10 years ago
- ☆18Jun 14, 2023Updated 3 years ago
- [DEPRECATED] A quickstart demo for Kolide tools☆51May 29, 2018Updated 8 years ago