A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspect.
☆36Apr 2, 2026Updated 7 months ago
Alternatives and similar repositories for Blue
Users that are interested in Blue are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.☆12Updated this week
- ETW forensic tool for Volatility3 plugin☆17Nov 15, 2024Updated last year
- Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.☆31Aug 28, 2025Updated last year
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 10 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆29Oct 15, 2025Updated last year
- Mount forensic disk images, archives & memory dumps as a filesystem on Linux/macOS/Windows — ext4/NTFS/exFAT/HFS+/APFS/ISO, EWF/VMDK/AFF4…☆10Updated this week
- Various AD tools needed for penetration testing in one place.☆25Jul 13, 2023Updated 3 years ago
- A modular PCAP forensics tool☆16Oct 25, 2026Updated last week
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- How to dump lsass via spoolsv with DLL side-loading.☆14Nov 29, 2025Updated 11 months ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- ☆14Jun 4, 2026Updated 5 months ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- EnumDNS is a modular DNS reconnaissance tool capable of resolving hosts from various sources, including wordlists, BloodHound files, and …☆22Oct 21, 2026Updated 2 weeks ago
- Construct triage artifact based on rules☆20Oct 14, 2026Updated 3 weeks ago
- RedAudit is a next-generation Windows forensic and security assessment framework featuring a live cyber-operations GUI built for real inv…☆36Nov 15, 2025Updated 11 months ago
- Rust-based Fast Forensics Tool for Windows☆15Aug 9, 2026Updated 2 months ago
- JavaScript debugger extension for WinDbg that allows to dump the partitions running on Hyper-V☆12Jul 28, 2021Updated 5 years ago
- ☆14Feb 28, 2026Updated 8 months ago
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆67Dec 18, 2024Updated last year
- ☆26Apr 22, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆14Updated this week
- With zero dependencies, NetCredz extracts credentials from pcap files or live traffic, supporting NTLM, LDAP, HTTP, SMTP, SNMP, Telnet, F…☆82Dec 2, 2024Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆33Jul 28, 2026Updated 3 months ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- aggregated repo for all conferences and talks I am giving☆17Oct 30, 2021Updated 5 years ago
- Portable Windows forensic tool for reviewing Firefox-like and Chromium-based browser artifacts, with labeling, search, CLI processing, an…☆59May 10, 2026Updated 5 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- The EPSS Calculator is a user-friendly web application that calculates the EPSS (Exploit Prediction Scoring System) score based on a prov…☆18Nov 11, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆28Jun 10, 2025Updated last year
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆25Oct 20, 2026Updated 2 weeks ago
- Live ETW-TI event viewer for Windows kernel threat-intelligence telemetry. Research tool for exploring the same signals commercial EDRs r…☆171Apr 15, 2026Updated 6 months ago
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- Yet another fseventsd parser for macOS forensics☆13Jul 20, 2024Updated 2 years ago
- ☆12Jul 15, 2022Updated 4 years ago