A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspect.
☆36Apr 2, 2026Updated 4 months ago
Alternatives and similar repositories for Blue
Users that are interested in Blue are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux BPF plugins for Volatility3☆23Jan 19, 2024Updated 2 years ago
- Construct triage artifact based on rules☆16Jun 18, 2026Updated last month
- This C# tool sprays for admin access over the entire domain☆90Dec 7, 2025Updated 8 months ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated 11 months ago
- Various AD tools needed for penetration testing in one place.☆25Jul 13, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- KQLIntel is a browser-based tool that uses LLMs to convert threat intelligence reports into actionable Kusto Query Language (KQL) queries…☆31Aug 4, 2025Updated last year
- ☆29Oct 15, 2025Updated 10 months ago
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- EnumDNS is a modular DNS reconnaissance tool capable of resolving hosts from various sources, including wordlists, BloodHound files, and …☆21Aug 10, 2026Updated last week
- ☆24Apr 22, 2025Updated last year
- ETW forensic tool for Volatility3 plugin☆17Nov 15, 2024Updated last year
- With zero dependencies, NetCredz extracts credentials from pcap files or live traffic, supporting NTLM, LDAP, HTTP, SMTP, SNMP, Telnet, F…☆82Dec 2, 2024Updated last year
- RedAudit is a next-generation Windows forensic and security assessment framework featuring a live cyber-operations GUI built for real inv…☆36Nov 15, 2025Updated 9 months ago
- ☆15Jun 4, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The EPSS Calculator is a user-friendly web application that calculates the EPSS (Exploit Prediction Scoring System) score based on a prov…☆17Nov 11, 2024Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 9 months ago
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- Live ETW-TI event viewer for Windows kernel threat-intelligence telemetry. Research tool for exploring the same signals commercial EDRs r…☆155Apr 15, 2026Updated 4 months ago
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 3 years ago
- Portable Windows forensic tool for reviewing Firefox-like and Chromium-based browser artifacts, with labeling, search, CLI processing, an…☆58May 10, 2026Updated 3 months ago
- The most comprehensive NTFS USN Journal parser: full path reconstruction (CyberCX Rewind), TriForce correlation (MFT + LogFile + UsnJrnl)…☆31Jul 28, 2026Updated 3 weeks ago
- aggregated repo for all conferences and talks I am giving☆17Oct 30, 2021Updated 4 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆59Jul 2, 2023Updated 3 years ago
- ☆12Jul 15, 2022Updated 4 years ago
- This is an advanced ASMI bypass that is currently undetected by Windows Defender and all the Antivirus software's on virustotal.☆27Jun 10, 2025Updated last year
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 4 months ago
- android-sms2csv.py extract SMS messages from Android backup files☆13Jun 19, 2020Updated 6 years ago
- Microsoft-Defender-for-IoT☆14May 26, 2025Updated last year
- ☆84Feb 4, 2026Updated 6 months ago
- Yara rules for malicious javascript files from public repositories or written by me.☆13Nov 12, 2021Updated 4 years ago
- ☆36Mar 23, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Script to process PDF files☆22May 23, 2025Updated last year
- ☆22Jan 28, 2026Updated 6 months ago
- A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…☆17Jan 28, 2026Updated 6 months ago
- AI-powered cybersecurity attack flow visualization tool using MITRE ATT&CK☆235Jul 18, 2026Updated 3 weeks ago
- Repo to hold my PowerShell Scripts☆17Oct 19, 2022Updated 3 years ago
- Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—s…☆31Sep 23, 2025Updated 10 months ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆17Jan 17, 2026Updated 7 months ago