Infection Monkey - An open-source adversary emulation platform

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

A script to analyze geographic GSuite Login activity

A small collection of Slack-connected tools

An information security preparedness tool to do adversarial simulation.

Office for Mac Macro Payload Generator

A VBA parser and emulation engine to analyze malicious macros.

Python decoder for ACARS messages, roughly inspired by wireshark

A collective list of public APIs for use in security. Contributions welcome

Emscripten: An LLVM-to-WebAssembly Compiler

A guide on how to be a Programmer - originally published by Robert L Read

Cortex: a Powerful Observable Analysis and Active Response Engine

TheHive is a Collaborative Case Management Platform, now distributed as a commercial version

Collaborative forensic timeline analysis

Find, verify, and analyze leaked credentials

Awesome collection of awesome lists of libraries, tools, frameworks and software for any programming language :D

A curated list of delightful Bash scripts and resources.

Security Guide for Developers

Automation and Scaling of Digital Forensics Tools

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

Create agents that monitor and act on your behalf. Your agents are standing by!

Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.

Main Sigma Rule Repository

Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust

Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.