⭐️ A curated list of awesome forensic analysis tools and resources

KQL Queries. Microsoft Defender, Microsoft Sentinel

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD…

A list of cyber-chef recipes and curated links

A guide to using Azure Data Explorer and KQL for DFIR

Unlock the power of Splunk SIEM for comprehensive log analysis. Collaborate and innovate with our Splunk Log Analysis Projects on GitHub

Main Sigma Rule Repository

Windows Events Attack Samples

Advanced Bash script designed for conducting digital forensics on Linux systems

Free hands-on digital forensics labs for students and faculty

A curated list of GPT agents for cybersecurity

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…

Labs for Practical Malware Analysis & Triage

MAL-CL (Malicious Command-Line)