Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs with caution.
☆40Apr 27, 2025Updated last year
Alternatives and similar repositories for blue-team
Users that are interested in blue-team are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of FOSS/Freeware. Most tools here are portable, which can be useful for when you are out-and-about. Obviously dedicated lab …☆27Sep 2, 2026Updated last month
- Notes, red team materials, testing tools, etc.☆162Oct 18, 2024Updated 2 years ago
- Scripts, Yara rules and other files developed during malware investigations☆28Aug 19, 2022Updated 4 years ago
- Automate Sysmon Deployment and Configuration☆20Jul 26, 2024Updated 2 years ago
- Random hunting ordiented yara rules☆98Mar 27, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆11Nov 2, 2023Updated 2 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Dec 1, 2022Updated 3 years ago
- A collection of curated YARA rules used as part of the Filescan.io service☆21Updated this week
- Goose IT's Turbo Netscaler☆17Jul 11, 2024Updated 2 years ago
- Collection Of Scripts And Utilities For Windows Event Hunting☆19Feb 20, 2020Updated 6 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- A PowerShell Logging Module that uses Classes to log to the console, log file, or the event viewer☆13Sep 13, 2018Updated 8 years ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆89Jun 4, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- PowerShell module to manage devices and drivers☆12Jan 15, 2021Updated 5 years ago
- A collection of shellcode hashes☆17Aug 15, 2018Updated 8 years ago
- Many of you probably noticed: Microsoft removed frxtray.exe from FSLogix. That little tray app used to give us the famous green / yellow…☆22Jan 14, 2026Updated 9 months ago
- just cmtrace☆12Feb 5, 2023Updated 3 years ago
- PowerShell Script to apply ExchangeHealthChecker recommendations☆18Sep 24, 2026Updated last month
- ☆14Jul 11, 2024Updated 2 years ago
- List of tools and references used by NU Cybersecurity students,☆15Feb 12, 2024Updated 2 years ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆46Feb 24, 2023Updated 3 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆13Jun 26, 2022Updated 4 years ago
- Code snippets for Qiling Tutorials☆21Aug 22, 2020Updated 6 years ago
- The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cybe…☆44Sep 17, 2020Updated 6 years ago
- ☆14Nov 12, 2021Updated 4 years ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated last month
- Collection Commander☆11Aug 23, 2018Updated 8 years ago
- ☆10Oct 21, 2018Updated 8 years ago
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆29Aug 6, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Display Exchange Server Health Status☆11Jan 5, 2023Updated 3 years ago
- ☆38Mar 6, 2026Updated 7 months ago
- A small tool to unmap PE memory dumps.☆11Nov 9, 2023Updated 2 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆19Feb 26, 2024Updated 2 years ago
- Script library for Managing Windows Server 2016 With PowerShell Cookbook☆33Sep 14, 2018Updated 8 years ago
- All my PowerShell scripts☆12Jan 7, 2023Updated 3 years ago
- DFIR notebooks GCIH Gold project, paper☆12Apr 30, 2015Updated 11 years ago