conexioninversa
I have worked in important companies as a consultant specialized in Threat Hunting, Incident Response, Honeynets, Threat Intelligence and pen-testing.
BANKINGTarragona - Spain
Pinned Repositories
analyst-scripts
Scripts to analyze stuff
APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
Awesome-CobaltStrike-Defence
Defences against Cobalt Strike
awesome-incident-response
A curated list of tools for incident response
Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
BitsParser
CDQR
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux and MacOS devices
chainsaw
Rapidly Search and Hunt through Windows Event Logs
Incident-Response
Tools for Incident Response, CyberSecurity and Digital Forensics
WOPR
Globally distributed honeypots and HoneyNets IOCs and file reversing
conexioninversa's Repositories
conexioninversa/WOPR
Globally distributed honeypots and HoneyNets IOCs and file reversing
conexioninversa/Incident-Response
Tools for Incident Response, CyberSecurity and Digital Forensics
conexioninversa/analyst-scripts
Scripts to analyze stuff
conexioninversa/APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
conexioninversa/Awesome-CobaltStrike-Defence
Defences against Cobalt Strike
conexioninversa/BitsParser
conexioninversa/chainsaw
Rapidly Search and Hunt through Windows Event Logs
conexioninversa/CobaltStrikeScan
Scan files or process memory for CobaltStrike beacons and parse their configuration
conexioninversa/conexioninversa
conexioninversa/conexioninversa.github.io
Forensics, Hunting and Threath Intel
conexioninversa/conti-leaks-englished
Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.
conexioninversa/CrowdStrike
CrowdStrike repo and reference
conexioninversa/Digital-forensics-with-python3
conexioninversa/EVTX-ETW-Resources
Event Tracing For Windows (ETW) Resources
conexioninversa/Forensics
Forensics Scripts
conexioninversa/forensicsim
A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and reactions from a Microsoft Teams IndexedDB LevelDB database.
conexioninversa/GCTI
conexioninversa/IRCP
A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments
conexioninversa/KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
conexioninversa/Live-Forensicator
Powershell Script to aid Incidence Response and Live Forensics
conexioninversa/LolDriverScan
Scan vulnerable drivers on Windows with loldrivers.io
conexioninversa/maltrail
Malicious traffic detection system
conexioninversa/MemProcFS
The Memory Process File System
conexioninversa/munin
Online hash checker for Virustotal and other services
conexioninversa/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual.
conexioninversa/RedTeaming-Tactics-and-Techniques
Red Teaming Tactics and Techniques
conexioninversa/Sealighter
Sysmon-Like research tool for ETW
conexioninversa/sigma
Generic Signature Format for SIEM Systems
conexioninversa/velociraptor
Digging Deeper....
conexioninversa/velociraptor-docs
Documentation site for Velociraptor