jtruppi's Stars
ideoforms/python-twitter-examples
Examples of using Python for Twitter social data mining, using the python-twitter-tools framework.
redcanaryco/atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
reactos/reactos-deprecated-gitsvn-dont-use
Abandoned ReactOS git-svn mirror, left only as a base for existing forks. Please use reactos.git for new contributions!
gentilkiwi/mimikatz
A little tool to play with Windows security
clymb3r/PowerShell
Useful PowerShell scripts
williballenthin/python-sdb
Pure Python parser for Application Compatibility Shim Databases (.sdb files)
tanium/pytan
Python Wrapper for Tanium's SOAP API
worawit/MS17-010
MS17-010
SwiftOnSecurity/sysmon-config
Sysmon configuration file template with default high-quality event tracing
tanium/SplunkforTanium
This is the Splunk App integrated with Tanium
pester/Pester
Pester is the ubiquitous test and mock framework for PowerShell.
halpomeranz/analyzeEXT
Recover EXT filesystem info from carved directory blocks
google/timesketch
Collaborative forensic timeline analysis
dlcowen/FSEventsParser
Parser for OSX/iOS FSEvents Logs
winsiderss/systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
nsacyber/Windows-Event-Log-Messages
Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. #nsacyber
google/grr
GRR Rapid Response: remote live forensics for incident response
GoFetchAD/GoFetch
GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.
jordansissel/fpm
Effing package management! Build packages for multiple platforms (deb, rpm, etc) with great ease and sanity.
Cn33liz/StarFighters
A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
moyix/pdbparse
Python code to parse Microsoft PDB files
VulnHub/ctf-writeups
CTF write-ups from the VulnHub CTF Team
NullMode/PuTTYExtractor
Export PuTTY SSH/Telnet settings stored in the registry and parse them as connections strings.
Bounteous17/libenom
clinthuffman/PAL
Performance Analysis of Logs (PAL) tool
byt3bl33d3r/DeathStar
Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.
mandiant/ioc_writer
p3nt4/PowerShdll
Run PowerShell with rundll32. Bypass software restrictions.
stephenfewer/ReflectiveDLLInjection
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
ForensicArtifacts/artifacts
Digital Forensics artifact repository