Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs with caution.
☆39Apr 27, 2025Updated 11 months ago
Alternatives and similar repositories for blue-team
Users that are interested in blue-team are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of curated YARA rules used as part of the Filescan.io service☆22Mar 27, 2026Updated last week
- Scripts, Yara rules and other files developed during malware investigations☆27Aug 19, 2022Updated 3 years ago
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Dec 1, 2022Updated 3 years ago
- A powershell module that enhances the output of Write-Host, Write-Debug, Write-Verbose, Write-Information and Write-Warning☆12Feb 13, 2025Updated last year
- ☆14Jul 11, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- A PowerShell Logging Module that uses Classes to log to the console, log file, or the event viewer☆13Sep 13, 2018Updated 7 years ago
- Code snippets for Qiling Tutorials☆21Aug 22, 2020Updated 5 years ago
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆88Oct 4, 2023Updated 2 years ago
- Goose IT's Turbo Netscaler☆17Jul 11, 2024Updated last year
- PowerShell Script to apply ExchangeHealthChecker recommendations☆18Feb 11, 2025Updated last year
- ☆13Jun 26, 2022Updated 3 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆19Feb 26, 2024Updated 2 years ago
- Custom ADMX template focused on hardening Windows 10 & Windows 11 systems☆96Apr 1, 2026Updated last week
- ☆24Mar 6, 2026Updated last month
- Wordpress hosting with auto-scaling on Cloudways • AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cybe…☆44Sep 17, 2020Updated 5 years ago
- Display Exchange Server Health Status☆11Jan 5, 2023Updated 3 years ago
- Collection Commander☆11Aug 23, 2018Updated 7 years ago
- Script library for Managing Windows Server 2016 With PowerShell Cookbook☆33Sep 14, 2018Updated 7 years ago
- A tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆18Jan 13, 2024Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆31Aug 6, 2022Updated 3 years ago
- Restore window positions when displays are connected and disconnected☆18Dec 27, 2024Updated last year
- ☆16May 31, 2025Updated 10 months ago
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- Website crawler with YARA detection☆89Aug 20, 2023Updated 2 years ago
- Ida Pro plugin to aid in reverse engineering Rust binaries.☆19Dec 9, 2024Updated last year
- Random hunting ordiented yara rules☆96Mar 27, 2023Updated 3 years ago
- Detection Ideas & Rules repository.☆178Sep 10, 2021Updated 4 years ago
- An IDA plugin to deobfuscate Pikabot's strings using RC4 and AES☆13Apr 8, 2024Updated 2 years ago
- Powershell scripts for differnet topics☆17Mar 12, 2026Updated 3 weeks ago
- Sysmon EDR POC Build within Powershell to prove ability.☆223May 1, 2021Updated 4 years ago
- Just another useless C2 occupying space in some HDD somewhere.☆22Jul 4, 2023Updated 2 years ago
- PRTG VMware Snapshot Monitoring☆15Apr 23, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling on Cloudways • AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- Repository of YARA rules made by Trellix ATR Team☆627Mar 18, 2025Updated last year
- IDA plugin to deobfuscate emotet CFF☆18Apr 26, 2022Updated 3 years ago
- Miscellaneous functions and utilities for System Administrators.☆22Jul 21, 2023Updated 2 years ago
- This tool run various tests against your WSUS & ConfigMgr environment, Including WSUS, SQL & IIS and provide feedback based on Microsoft…☆21Oct 26, 2023Updated 2 years ago
- Set up scripts for various OS'es☆26Jul 26, 2024Updated last year
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆121Mar 4, 2026Updated last month
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Sep 13, 2023Updated 2 years ago