MindMaps alternatives for AI agents.

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

A collection of resources for Threat Hunters

Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Volatility 3.0 development

The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

Collection of forensic tools

Cortex: a Powerful Observable Analysis and Active Response Engine

⚡️ Catalyst is a self-hosted, open source incident response platform and ticket system that helps to automate alert handling and incident response processes

Cortex Analyzers Repository

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Digging Deeper....

Forensics artefact collection tool for systems running Microsoft Windows

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR