blue-infosec Goto Github PK

hubble

Hubble - Network, Service & Security Observability for Kubernetes

hunt-detect-prevent

Lists of sources and utilities utilized to hunt, detect and prevent evildoers.

hunt-sleeping-beacons

Aims to identify sleeping beacons

hunter

A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.

hunting-queries-detection-rules

Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

hunting-queries-detection-rules1

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

huntlib

A Python library to help with some common threat hunting data analysis operations

huskyci

Performing security tests inside your CI

hyara

Yara rule making tool (IDA Pro & Binary Ninja & Cutter Plugin)

hybridanalysis_scripts

A bunch of scripts for HybridAnalysis things

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

ics_mem_collect

ileapp

iOS Logs, Events, And Preferences Parser

impelf

"ImpELF: A Python-based ELF hashing utility that generates unique fingerprints for ELF binaries using their imported functions and libraries, aiding in malware analysis and similarity detection."

imphash-generator

PE Import Hash Generator

incident-playbook

Incident Response Process and Playbooks | Goal: Playbooks to be Mapped to MITRE Attack Techniques

incident-response-collector

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

incident-runbook

A runbook for handling security incidents in cooperation with 0xsyr0

inhale

A malware analysis and classification tool.

installer

The SimpleRisk installer script.

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

intrigue-core

Discover Your Attack Surface!

intrigue-ident

Application and Service Fingerprinting

intrusion_detection

A research work to create an effective IDS

investigationplaybookspec

InvestigationPlaybookSpec

invoke-apex

A PowerShell-based toolkit and framework consisting of a collection of techniques and tradecraft for use in red team, post-exploitation, adversary simulation, or other offensive security tasks.

invoke-detectiteasy

Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.

invoke-evasion

PowerShell Obfuscation and Data Science

invoke-forensics

Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.