Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs with caution.
☆39Apr 27, 2025Updated last year
Alternatives and similar repositories for blue-team
Users that are interested in blue-team are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of FOSS/Freeware. Most tools here are portable, which can be useful for when you are out-and-about. Obviously dedicated lab …☆26Sep 2, 2026Updated 2 weeks ago
- Notes, red team materials, testing tools, etc.☆160Oct 18, 2024Updated last year
- Automate Sysmon Deployment and Configuration☆20Jul 26, 2024Updated 2 years ago
- A collection of curated YARA rules used as part of the Filescan.io service☆22Updated this week
- Scripts, Yara rules and other files developed during malware investigations☆28Aug 19, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Dec 1, 2022Updated 3 years ago
- Goose IT's Turbo Netscaler☆17Jul 11, 2024Updated 2 years ago
- A powershell module that enhances the output of Write-Host, Write-Debug, Write-Verbose, Write-Information and Write-Warning☆12Feb 13, 2025Updated last year
- Collection of PowerShell functinos and scripts a Blue Teamer might use☆89Jun 4, 2026Updated 3 months ago
- A PowerShell Logging Module that uses Classes to log to the console, log file, or the event viewer☆13Sep 13, 2018Updated 8 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago
- ☆13Jun 26, 2022Updated 4 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆19Feb 26, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cybe…☆44Sep 17, 2020Updated 5 years ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆110Jul 26, 2024Updated 2 years ago
- Display Exchange Server Health Status☆11Jan 5, 2023Updated 3 years ago
- IoCs and YARA rules from Threatray's Threat Research☆22Updated this week
- This is a repo for fetching Applocker event log by parsing the win-event log☆29Aug 6, 2022Updated 4 years ago
- All my PowerShell scripts☆12Jan 7, 2023Updated 3 years ago
- Add or Remove Applications from / to Windows 10 Tasbar, Taskbar-Pinning, Pin, Unpin☆18Mar 25, 2018Updated 8 years ago
- Just another useless C2 occupying space in some HDD somewhere.☆23Jul 4, 2023Updated 3 years ago
- This is a cyber security operations compilation of tools and techniques compiled by Chris Davis. Gerald Auger did not create or add to th…☆26May 31, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A small tool to unmap PE memory dumps.☆11Nov 9, 2023Updated 2 years ago
- function identification signatures☆12Apr 26, 2021Updated 5 years ago
- ☆16May 31, 2025Updated last year
- A tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆18Jan 13, 2024Updated 2 years ago
- Restore window positions when displays are connected and disconnected☆18Dec 27, 2024Updated last year
- Ida Pro plugin to aid in reverse engineering Rust binaries.☆20Dec 9, 2024Updated last year
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 5 years ago
- PRTG VMware Snapshot Monitoring☆15Apr 23, 2023Updated 3 years ago
- Website crawler with YARA detection☆89Aug 20, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆18Apr 24, 2026Updated 4 months ago
- Random hunting ordiented yara rules☆97Mar 27, 2023Updated 3 years ago
- Scripts that are suited for blue teams☆33Mar 17, 2016Updated 10 years ago
- Simplifies the implementation of Just Enough Administration by providing functions to convert Code, ScriptBlocks or Scripts into JEA role…☆32May 7, 2025Updated last year
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆229May 1, 2021Updated 5 years ago
- Intune Remediations On-Demand with PowerShell. Script execution with a modern WPF GUI and Microsoft Graph API integration.☆26Jun 3, 2026Updated 3 months ago