ThatDFIRguy

ThatDFIRguy's Stars

• 3CORESec/testmynids.org

  A website and framework for testing NIDS detection

  Language:Shell23122

• sans-blue-team/DeepBlueCLI

  Language:PowerShell2.2k355

• certsocietegenerale/IRM-deprecated

  Incident Response Methodologies

  1k216

• cyberdefenders/DetectionLabELK

  DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

  Language:PowerShell546103

• clong/DetectionLab

  Automate the creation of a lab environment complete with security tooling and logging best practices

  Language:HTML4.7k996

• Purp1eW0lf/Blue-Team-Notes

  You didn't think I'd go and leave the blue team out, right?

  1.6k241

• PlumHound/PlumHound

  Bloodhound Reporting for Blue and Purple Teams

  Language:Python1.1k112

• TheWorldOfPC/Windows11-Debloat-Privacy-Guide

  Language:Batchfile36547

• payloadbox/sql-injection-payload-list

  🎯 SQL Injection Payload List

  5.1k1.2k

• nshalabi/ATTACK-Tools

  Utilities for MITRE™ ATT&CK

  Language:HTML1k213

• mitre-attack/bzar

  A set of Zeek scripts to detect ATT&CK techniques.

  Language:Zeek57176

• iptv-org/iptv

  Collection of publicly available IPTV channels from all over the world

  Language:JavaScript88.6k3k

• certsocietegenerale/FIR

  Fast Incident Response

  Language:JavaScript1.8k506

• cyb3rfox/Aurora-Incident-Response

  Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders

  Language:JavaScript77781

• outflanknl/RedELK

  Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

  Language:Python2.4k375

• TheresAFewConors/Sooty

  The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

  Language:Python1.4k212

• brianreitz/awesome-blueteam

  A list of resources to build a information security team.

  135

• philhagen/sof-elk

  Configuration files for the SOF-ELK VM

  Language:Shell1.5k285

• cisagov/Malcolm

  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

  Language:Python2k338

• dfirtrack/dfirtrack

  DFIRTrack - The Incident Response Tracking Application

  Language:Python48575

• thalesgroup-cert/Watcher

  Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

  Language:Python874128

• TheHive-Project/TheHive

  TheHive: a Scalable, Open Source and Free Security Incident Response Platform

  Language:Scala3.5k630

• freeCodeCamp/freeCodeCamp

  freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

  Language:TypeScript408k38.6k