Playbooks for SOC Analysts

Automated security lab provisioning

A comprehensive collection of Kusto Query Language (KQL) queries designed for security professionals to detect, hunt, and respond to cyber threats and incidents, covering areas like Detections, Dig…

A realtime acoustic bird classification system for the Raspberry Pi 5, 4B 3B+ 0W2 and more. Built on the TFLite version of BirdNET.

An interactive powershell script for Azure/Entra. Creates a set of conditional access policies that will provide improved security over Microsoft's "Security Defaults". This script is primarily for…

ScriptSentry finds misconfigured and dangerous logon scripts.

macOS Security Resources

wallabag is a self hostable application for saving web pages: Save and classify articles. Read them later. Freely.

It's Times New Roman but every seventh letter is jarringly sans serif

Self-hosted webscraper.

Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Tools and Techniques for Red Team / Penetration Testing

List of pastebin services

Automated Cybersecurity Self-Assessment Tool

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC,…

WiFi Penetration Testing & Auditing Tool

A list of selected resources, methods, and tools dedicated to legal data schemes and ontologies.

Documentation and scripts to properly enable Windows event logs.

PlasmaPup is designed to help central and departmental IT personnel understand their exposures in Active Directory by showing which accounts have permissions to make changes within their OU(s) or m…

Gram is Klarna's own threat model diagramming tool

Jan is an open source alternative to ChatGPT that runs 100% offline on your computer. Multiple engine support (llama.cpp, TensorRT-LLM)

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, si…

A curated list of tools for incident response

Sample shell scripts for Intune admins.

The open source Tines / Splunk SOAR alternative for security engineers.

AI Powered Sensitive Information Detection

Windows inside a Docker container.

SOC Interview Questions

🔥 Enterprise SaaS Starter Kit - Kickstart your enterprise app development with the Next.js SaaS boilerplate 🚀