Direct Memory Access attack toolkit.
ExploitInterceptEndpointsBinaries
cyberstars / purpose / forensics
Tools for forensics
Incident response and evidence collection.
88 tools indexed
OSINT framework for phone numbers.
ReconWeb apps
Super-timelining for forensics.
AnalyzeEndpointsBinaries
Live PowerShell disk forensics.
AnalyzeEndpoints
Linux port of Sysinternals Procmon.
MonitorAnalyzeEndpoints
JavaScript deobfuscator.
AnalyzeSource codeWeb apps
Open SOC distribution.
MonitorAnalyzeNetworksEndpoints
Hunt usernames across social networks.
ReconWeb apps
Vendor-agnostic detection rules.
MonitorAnalyzeEndpointsNetworks
Open-source IPS, next generation.
MonitorInterceptNetworks
Find a profile across 1000+ networks.
ReconWeb apps
Windows kernel + user-mode emulator.
AnalyzeBinaries
High-performance IDS / IPS.
MonitorInterceptNetworks
Microsoft's Sysmon, on Linux.
MonitorEndpointsCloud
All-in-one honeypot platform.
MonitorAnalyzeNetworksEndpoints
Wireshark on the command line.
InterceptAnalyzeNetworks
Filesystem forensics library.
AnalyzeEndpointsBinaries
Open-source SIRP for incident response.
AutomateMonitorEndpointsNetworks
UAC
—Unix-like artifact collector.
AnalyzeMonitorEndpoints
UPX
—Ultimate Packer for eXecutables.
AnalyzeBinaries
Endpoint visibility and DFIR.
MonitorAnalyzeEndpoints
Memory forensics framework.
AnalyzeEndpointsBinaries
Open-source EDR for Windows.
MonitorAnalyzeEndpoints
Open-source XDR and SIEM.
MonitorScanEndpointsCloud