Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

Rapidly Search and Hunt through Windows Event Logs

Rapidly Search and Hunt through Windows Forensic Artefacts

GRR Rapid Response: remote live forensics for incident response

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec …

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.

Cyber Threat Intelligence Repository expressed in STIX 2.0

GRR Rapid Response: remote live forensics for incident response

Scripts and a (future) library to improve users' interactions with the ATT&CK content

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

Automated Adversary Emulation

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Automated Adversary Emulation Platform

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…