Pinned Repositories
Awesome_DFIR_CTFs
Awesome list of resources for Blue Team DFIR CTF exercises and data sets
AwesomeReconDetectionStrings
Lists of strings commonly associated with attacker recon from compromised devices.
DetectionContent
evtx2csv
Export EVTX files to CSV from a mounted filesystem
JupyterThreatIntel
Jupyter Notebooks for Threat Intel
KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
LP_KNFE
LP_ReconProc
LP_Summaries.bat
Sample queries for some data stacking of windows event logs using LogParser
war_crime_faces
Jupyter Notebook Demonstrating How to Identify Russian War Criminals with OSINT Tools
dfirtnt's Repositories
dfirtnt/evtx2csv
Export EVTX files to CSV from a mounted filesystem
dfirtnt/Awesome_DFIR_CTFs
Awesome list of resources for Blue Team DFIR CTF exercises and data sets
dfirtnt/LP_ReconProc
dfirtnt/LP_KNFE
dfirtnt/AwesomeReconDetectionStrings
Lists of strings commonly associated with attacker recon from compromised devices.
dfirtnt/LP_Summaries.bat
Sample queries for some data stacking of windows event logs using LogParser
dfirtnt/war_crime_faces
Jupyter Notebook Demonstrating How to Identify Russian War Criminals with OSINT Tools
dfirtnt/DetectionContent
dfirtnt/JupyterThreatIntel
Jupyter Notebooks for Threat Intel
dfirtnt/KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
dfirtnt/PlasoTriageArtifacts
List of files/paths to collect when doing collections or to analyze post-collection
dfirtnt/Presentations
dfirtnt/Malware-Detection
Machine learning using Jupyter
dfirtnt/msticpy
Microsoft Threat Intelligence Security Tools
dfirtnt/numpy-tutorials
NumPy tutorials & educational content in notebook format
dfirtnt/python-programming-for-data-science
Content from the University of British Columbia's Master of Data Science course DSCI 511.
dfirtnt/RedCanary_surveyor
A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.
dfirtnt/REM-Jupyter
Malware analysis using jupyter
dfirtnt/sigma
Main Sigma Rule Repository
dfirtnt/terraform-vpc
Terraform |Â Infrastructure as Code!
dfirtnt/velociraptor-docs
Documentation site for Velociraptor
dfirtnt/volatility_plugins
Volatility plugins
dfirtnt/vt-py
The official Python 3 client library for VirusTotal