sandialabs / gaitView external linksLinks
Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
☆39Sep 2, 2025Updated 5 months ago
Alternatives and similar repositories for gait
Users that are interested in gait are comparing it to the libraries listed below
Sorting:
- Growing collection of Spicy-based protocol and file analyzers for Zeek☆32Sep 16, 2024Updated last year
- JA4TScan is an active TCP server fingerprinting tool.☆105Aug 29, 2024Updated last year
- Simple script to generate commands to achieve reverse shells.☆12Aug 12, 2019Updated 6 years ago
- Disk Image Mounting Script☆11Jan 22, 2026Updated 3 weeks ago
- Create a MS Word index file from PowerPoint notes and slides☆46Sep 6, 2025Updated 5 months ago
- Bro analyzer that detects Google's QUIC protocol☆10Mar 2, 2021Updated 4 years ago
- Random scripts for azure stuff☆13Oct 12, 2022Updated 3 years ago
- This module detects HTTP requests that are non RFC compliant and used for smuggling☆12Mar 16, 2023Updated 2 years ago
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆80Sep 13, 2023Updated 2 years ago
- A RESTful API frontend for Stenographer☆54Dec 7, 2022Updated 3 years ago
- NTFSx is a tool for extracting files from an NTFS filesystem that are otherwise inaccessible.☆14Jul 26, 2013Updated 12 years ago
- A crawler to export all chat threads in a Microsoft Teams channel☆12Feb 16, 2021Updated 4 years ago
- ReverShellGenerator - A tool to generate various ways to do a reverse shell☆12Mar 2, 2019Updated 6 years ago
- Collection of Offensive C# Tooling☆13Nov 4, 2021Updated 4 years ago
- A Django application to help red team operators manage a library of domain names☆167May 24, 2023Updated 2 years ago
- Serving files with conditions, serverside keying and more.☆18May 26, 2022Updated 3 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 2 years ago
- Zeek Modbus Extension Scripts - CISA ICSNPP☆20Dec 16, 2025Updated last month
- Zeek OPCUA Binary Parser - CISA ICSNPP☆21Nov 19, 2025Updated 2 months ago
- Emulates the Sysinternals Autoruns tool, but for DFIR purposes e.g. multi user processing☆55May 18, 2019Updated 6 years ago
- Zeek package for detecting the Eternal* exploits and a set of SMBv1 protocol violations.☆19Aug 21, 2025Updated 5 months ago
- Scripted Local Linux Enumeration & Privilege Escalation Checks☆19Mar 26, 2019Updated 6 years ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 2 years ago
- Miscellaneous for various things☆21Nov 19, 2024Updated last year
- Easy to extend initial access scenario to help with EDR testing on Linux and Mac☆26Mar 20, 2022Updated 3 years ago
- Identifies physical locations where a laptop has been based upon wireless profiles and wireless data recorded in event logs☆100Jun 2, 2021Updated 4 years ago
- The repository accompanying the Buer Emulation workshop☆23Aug 18, 2021Updated 4 years ago
- Zeek Ethernet/IP and CIP Parser - CISA ICSNPP☆26Nov 6, 2025Updated 3 months ago
- Hiding your infrastructure from the boys in blue.☆23Oct 18, 2021Updated 4 years ago
- Simple Imager has been created for performing live acquisition of Windows based systems in a forensically sound manner☆30Oct 28, 2025Updated 3 months ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 4 years ago
- Parse a PowerPoint PPTX file, extracting all URL's from notes and slides, and test for validity☆28Apr 4, 2025Updated 10 months ago
- PoC C&C for the Industroyer malware☆26Jun 30, 2017Updated 8 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Jul 7, 2018Updated 7 years ago
- A Catalog of Application Whitelisting Bypass Techniques☆31Nov 11, 2014Updated 11 years ago
- Python command line tool used for generating GIAC Certification indexes.☆29Jul 17, 2023Updated 2 years ago
- A rust utility for instrumenting binaries, used in Holiday Hack Challenge 2021☆27Mar 9, 2022Updated 3 years ago
- A Docker container for Moloch based on ubuntu☆23Jan 24, 2022Updated 4 years ago
- Bro PCAP Processing and Tagging API☆28Nov 9, 2017Updated 8 years ago