dfirtnt

Awesome_DFIR_CTFs

Awesome list of resources for Blue Team DFIR CTF exercises and data sets

AwesomeReconDetectionStrings

Lists of strings commonly associated with attacker recon from compromised devices.

DetectionContent

evtx2csv

Export EVTX files to CSV from a mounted filesystem

JupyterThreatIntel

Jupyter Notebooks for Threat Intel

KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

LP_KNFE

LP_ReconProc

LP_Summaries.bat

Sample queries for some data stacking of windows event logs using LogParser

war_crime_faces

Jupyter Notebook Demonstrating How to Identify Russian War Criminals with OSINT Tools

dfirtnt/evtx2csv

Export EVTX files to CSV from a mounted filesystem

dfirtnt/Awesome_DFIR_CTFs

Awesome list of resources for Blue Team DFIR CTF exercises and data sets

dfirtnt/LP_ReconProc

dfirtnt/LP_KNFE

dfirtnt/AwesomeReconDetectionStrings

Lists of strings commonly associated with attacker recon from compromised devices.

dfirtnt/LP_Summaries.bat

Sample queries for some data stacking of windows event logs using LogParser

dfirtnt/war_crime_faces

Jupyter Notebook Demonstrating How to Identify Russian War Criminals with OSINT Tools

dfirtnt/DetectionContent

dfirtnt/JupyterThreatIntel

Jupyter Notebooks for Threat Intel

dfirtnt/KapeFiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

dfirtnt/PlasoTriageArtifacts

List of files/paths to collect when doing collections or to analyze post-collection

dfirtnt/Presentations

dfirtnt/Malware-Detection

Machine learning using Jupyter

dfirtnt/msticpy

Microsoft Threat Intelligence Security Tools

dfirtnt/numpy-tutorials

NumPy tutorials & educational content in notebook format

dfirtnt/python-programming-for-data-science

Content from the University of British Columbia's Master of Data Science course DSCI 511.

dfirtnt/RedCanary_surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

dfirtnt/REM-Jupyter

Malware analysis using jupyter

dfirtnt/sigma

Main Sigma Rule Repository

dfirtnt/terraform-vpc

Terraform | Infrastructure as Code!

dfirtnt/velociraptor-docs

Documentation site for Velociraptor

dfirtnt/volatility_plugins

Volatility plugins

dfirtnt/vt-py

The official Python 3 client library for VirusTotal