Pinned Repositories
awesome-memory-forensics
A curated list of awesome Memory Forensics for DFIR
Awesome-SOAR
A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.
awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure
Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
sigma-rule
Main Sigma Rule Repository
signature-base
YARA signature and IOC database for my scanners and tools
sysmon-modular
A repository of sysmon configuration modules
ShIft32l's Repositories
ShIft32l/awesome-memory-forensics
A curated list of awesome Memory Forensics for DFIR
ShIft32l/awesome-threat-detection
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
ShIft32l/AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure
ShIft32l/Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
ShIft32l/Blue-Team-Notes
You didn't think I'd go and leave the blue team out, right?
ShIft32l/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
ShIft32l/sigma-rule
Main Sigma Rule Repository
ShIft32l/signature-base
YARA signature and IOC database for my scanners and tools
ShIft32l/sysmon-modular
A repository of sysmon configuration modules
ShIft32l/CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
ShIft32l/community
Modern Confluence alternative designed for internal & external docs, built with Go + EmberJS
ShIft32l/deepdarkCTI
Collection of Cyber Threat Intelligence sources from the deep and dark web
ShIft32l/DFIRArtifactMuseum
The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifacts that may no longer be readily available anymore.
ShIft32l/Flipper-Zero-BadUSB
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.
ShIft32l/HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser.
ShIft32l/IBM-QRadar-Network-Hierarchy
Python code to import Network Hierarchy info into IBM QRadar
ShIft32l/iris-web
Collaborative Incident Response platform
ShIft32l/mac-monitor
Red Canary Mac Monitor is an advanced, stand-alone system monitoring tool tailor-made for macOS security research. Beginning with Endpoint Security (ES), it collects and enriches system events, displaying them graphically, with an expansive feature set designed to reduce noise.
ShIft32l/Malware-Exhibit
🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have created or Compiled/analysed🔥 to understand more about Malware threats😈, analysis and mitigation🧐.
ShIft32l/malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
ShIft32l/Mindmap
This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them
ShIft32l/msrc-api
A collection of tools to interact with Microsoft Security Response Center API
ShIft32l/next-netlify-starter
ShIft32l/PhishingKit-Yara-Rules
Repository of Yara rules dedicated to Phishing Kits Zip files
ShIft32l/RDPWRAP
update rdpwrap.ini
ShIft32l/ShIft32l
Config files for my GitHub profile.
ShIft32l/sigma_rules_tsale
Random sigma rules to share with the community
ShIft32l/sysmon-dfir
Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.
ShIft32l/TokenUniverse
An advanced tool for working with access tokens and Windows security policy.
ShIft32l/wtfis
Passive host and domain name lookup tool for non-robots