blue-infosec Goto Github PK

windows_hardening

Windows Hardening settings and configurations

windowsfirewallruleset

Windows firewall ruleset powershell scripts

windowsmempagedelta

A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection

winlogszero2hero

This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.

winshark

A wireshark plugin to instrument ETW

winterfell

Winterfell are a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.

wintools

A collection of free miscellaneous Windows tools

wireshark-profile

My custom troubleshooting profile for Wireshark

wireshark-profiles

Collection of Wireshark profiles I use

wireshark-workshop

pcaps of traffic for traffic analysis workshop

wireshark_profiles

WireShark profiles for PCAP Analysis

witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

wmi_forensics

wonkavision

wslab

Windows Server rapid lab deployment scripts

wsus_package_publisher

Publish third party applications into your Wsus.

xlmmacrodeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

xlmulator

Python emulator for Excel XLM macros.

xwf-yara-scanner

yaegi

Yaegi is Another Elegant Go Interpreter

yams

A collection of Ansible roles for automating infosec builds.

yara

yara-endpoint

Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.

yara-rles

yara-rules

A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.

yara-rules-1

Yara rules for malware research

yara-rules-2

Collection of private Yara rules.

yaradbg-issues

yarahunts

Random hunting ordiented yara rules

yaralyzer

Visually inspect YARA and regex matches found in both binary and text data.