blue-infosec Goto Github PK

threat_intel

Threat Intelligence APIs

threatnote

threatnote.io | Cyber Threat Intelligence Notebook

threatprep

Python module for evaluation of AWS account best practices around incident handling readieness.

threatpursuit-vm

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

timeliner

A rewrite of mactime, a bodyfile reader

timesketch

Collaborative forensic timeline analysis

tiny_tracer

A Pin Tool for tracing API calls etc

tiq-test

Threat Intelligence Quotient Test - Dataviz and Statistical Analysis of TI feeds

tl-trojan

A collection of source code for various RATs, Stealers, and other Trojans.

tls-fingerprinting

TLS Fingerprinting

tlsh

tlshc

TLSH library in C

toolkit

A toolkit for the post-mortem examination of Docker containers from forensic HDD copies

tools

Tools from WFA 4/e, timeline tools, etc.

top-dns

Top DNS Measurement for Bro

tpotce

🍯 T-Pot - The All In One Honeypot Platform 🐝

trailofphish

Phishing e-mail repository

tram

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.

transpiler

SIEM-to-Spark Transpiler

trapdoor

Serverless honeytoken 🕵🏻‍♂️

trisul-scripts

Ready to run scripts for network analysis

trivy

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

truetree

A command line tool for pstree-like output on macOS with additional pid capturing capabilities

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

ttl-monitor

A TTL monitor utility for identifying route changes, port forwards, intrusion responses, and more

turbinia

Automation and Scaling of Digital Forensics Tools

tweetsniff

Grab a Twitter user timeline for further processing (storing to Elasticsearch, highligthing, etc)

twitter-ti-feeds

tylium

Primary data pipelines for intrusion detection, security analytics and threat hunting

tyton

Kernel-Mode Rootkit Hunter