Starred repositories
A command line interface for audible package. With the cli you can download your Audible books, cover, chapter files.
A simple, lightweight PowerShell script that allows you to remove pre-installed apps, disable telemetry, as well as perform various other changes to declutter and customize your Windows experience.…
A curated collection of tools, techniques, frameworks, and learning resources focused on Attack Surface Management (ASM).
The Art of Pivoting - Techniques for Intelligence Analysts to Discover New Relationships in a Complex World
A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners
A resource containing all the tools each ransomware gangs uses
Turn a supported list of filetypes (e.g. .docx) into a markdown structured text file. Also optionally defangs indicators and extract texts from images. Built for threat intel use-cases.
Cyber Underground General Intelligence Requirements
Useful resources for SOC Analyst and SOC Analyst candidates.
A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID
A large collection of system log datasets for AI-driven log analytics [ISSRE'23]
List of MurmurHash3 favicon hashes of widely used technologies by vendor to search with Shodan.
A detailed list of potentially dangerous file extensions
A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling, books, articles and a plethora of learning resources from t…
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit …
PowerShell module for Office 365 and Azure log collection
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
Technical Tabletop Exercises Simulation Framework
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made w…
A multi-purpose OSINT toolkit with a neat web-interface.
Carves and recreates VSS catalog and store from Windows disk image.
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk