beercow Goto Github PK

ail-framework

AIL framework - Analysis Information Leak framework

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

autotimeliner

Automagically extract forensic timeline from volatile memory dump

azure-app-ids

Curated list of well-known app ids

backstageparser

Backstage Parser

berryio

Web Browser based control system for the RaspberryPi

bloodhound

Six Degrees of Domain Admin

captipper

Malicious HTTP traffic explorer tool

chaosreader

An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data

circlean

USB key cleaner

crazyparser

Parse URLCrazy and dnstwist output and compare against previous runs to identify new typosquatted domains.

cryptowall

Cryptowall Tooling & Information

cryptowall_v3

A repository of scripts and files related to the CryptoWall version 3 threat

darcula.nbm

dllrunner

Smart DLL execution for malware analysis in sandbox systems

download-iocbucket

Python program to download IOCBucket.com IOC and YARA files

ekdeco

Scripts for dealing with various ek's

elat

Event Log Analysis Tools

eqgrp-free-file

Free sampling of files from the purported Equation Group hack.

evolve

Web interface for the Volatility Memory Forensics Framework

forensics

Scripts and code referenced in CrowdStrike blog posts

githubdownloader

Find and download files from multiple Github repositories

kape-automation

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

keethief

Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.

logparser-studio-sirt-query

lp_knfe

maildb

Python Web App to Parse and Track Email and http Pcap Files.

malcontrol

Malware Control Monitor

malicious-domain-profiling

Automatically exported from code.google.com/p/malicious-domain-profiling