In short, just give it access to your alerts.json, default rules, custom rules, archives.json, and magic happens.

PromptSniffer is a security auditing tool designed for authorized penetration testing and corporate DLP monitoring. It captures and monitors prompts sent to Large Language Models (ChatGPT, Claude, …

This tool monitors Velociraptor's syslog messages for specific actions performed by users within the Velociraptor DFIR platform. When certain patterns are detected, it sends detailed email notifica…

Honestly this is just the place where I dump all my custom made Velociraptor VQL Artifacts.

FortiLucene is a Web UI Program Interface that facilitates the FortiEDR Lucene Syntax Query Language

FortiEDR Threat Intelligence Integration - FortiEDR Lucene Query Language GUI Builder - FortiEDR Automated Threat Hunting Queries - Microsoft Azure Sentinel KQL Automated Threat Hunting Queries - E…

KQL Local Manager, allows you to manage and organize KQL Queries in a central Database.

Simplified Import Hash & Export Hash. Get Imphash - Get Exphash

FortiEDR Threat Intelligence Database. ThreatFox Threat Intelligence Database Integration with FortiEDR

Locally Extract Text from Image using Tesseract