Incident Response Powershell alternatives for AI agents.

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

PagerDuty's Incident Response Documentation.

PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Cover various security approaches to attack techniques and also provides new discoveries about security breaches.

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

FAME Automates Malware Evaluation

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

game of active directory

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Volatility 3.0 development

Digging Deeper....