VanillaWindowsReference

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

A curated list of tools for incident response

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Automation and Scaling of Digital Forensics Tools

A web front-end for password cracking and analytics

Query and report user logons relations from MS Windows Security Events

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.

A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.