Scripts and outputs for ATLAS data in STIX JSON and ATT&CK Navigator layer formats

ATLAS tactics, techniques, and case studies data

Volatility 3.0 development

Master copies of the DISARM frameworks, with generated files to help you explore the data

Neo4j graph construction from unstructured data using LLMs

g(ULP) - graphical universal log processor

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regex…

A RAG LLM co-pilot for browsing the web, powered by local LLMs

Regipy is an os independent python library for parsing offline registry hives

A Game of Hackers (CTF Scoreboard & Game Manager)

A Python library to access ISO country, subdivision, language, currency and script definitions and their translations.

pypykatz plugin for volatility3 framework

A python app to predict Att&ck tactics and techniques from cyber threat reports

Tokenizer for raw mails

Rep. for the Cortex Responder (TheHive project) to Lock/Unlock User Accounts in the Duo Admin Portal (Cisco Security)

Accurately separate the TLD from the registered domain and subdomains of a URL, using the Public Suffix List.

Home of Badgy - IoT Badge

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.