dfir topic
Invoke-LiveResponse
Invoke-LiveResponse
ATTACKdatamap
A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
DetectionLab
Automate the creation of a lab environment complete with security tooling and logging best practices
Loki
Loki - Simple IOC and YARA Scanner
signature-base
YARA signature and IOC database for my scanners and tools
swap_digger
swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web form...
MemLabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.