r4gast

r4gast's Stars

• r4gast/blog

  blog

  1

• LearningKijo/KQL

  Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

  44278

• SigmaHQ/pySigma

  Python library to parse and convert Sigma rules into queries (and whatever else you could imagine)

  Language:Python395102

• SigmaHQ/sigma

  Main Sigma Rule Repository

  Language:Python8.3k2.2k

• bartblaze/Yara-rules

  Collection of private Yara rules.

  Language:YARA32654

• aquasecurity/trivy

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  Language:Go23.5k2.3k

• ashemery/malware-tools

  A list of useful tools for Malware Analysis (will be updated regularly)

  Language:HTML12512

• 0xAnalyst/CB-Threat-Hunting

  Language:Python11539

• weslambert/velociraptor-docker

  Docker image for Velocidex Velociraptor

  Language:Shell11345

• dfir-iris/iris-web

  Collaborative Incident Response platform

  Language:JavaScript1.1k181

• r4gast/cortex-xdr-client

  A python-based API client for Cortex XDR API.

  1

• lawiet47/mobileiron-api

  A python API for Mobile Iron Cloud

  Language:Python4

• AbdulRhmanAlfaifi/Fennec

  Artifact collection tool for *nix systems

  Language:Rust19121

• WithSecureLabs/LinuxCatScale

  Incident Response collection and processing scripts with automated reporting scripts

  Language:Shell26749

• R3MRUM/PSDecode

  PowerShell script for deobfuscating encoded PowerShell scripts

  Language:PowerShell41778

• muteb/Hoarder

  This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

  Language:Python19219

• DFIRKuiper/Kuiper

  Digital Forensics Investigation Platform

  Language:JavaScript768111

• hasherezade/malware_training_vol1

  Materials for Windows Malware Analysis training (volume 1)

  Language:Assembly1.9k186

• TheHive-Project/TheHive

  TheHive: a Scalable, Open Source and Free Security Incident Response Platform

  Language:Scala3.4k623