{"id":22559991,"url":"https://github.com/paulveillard/cybersecurity-infosec","last_synced_at":"2025-04-10T09:28:48.433Z","repository":{"id":41293342,"uuid":"437423190","full_name":"paulveillard/cybersecurity-infosec","owner":"paulveillard","description":"An ongoing \u0026 curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Information Security in Cybersecurity.","archived":false,"fork":false,"pushed_at":"2025-01-27T19:38:08.000Z","size":1202,"stargazers_count":52,"open_issues_count":0,"forks_count":12,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-03-24T08:21:21.993Z","etag":null,"topics":["information-security","information-security-management","information-security-policies","information-technology","infosec","infrastructure","it","it-security","security","security-scan","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/paulveillard.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"contributing.md","funding":null,"license":"LICENSE","code_of_conduct":"code-of-conduct.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-12-12T01:00:16.000Z","updated_at":"2025-03-12T20:55:03.000Z","dependencies_parsed_at":"2022-09-11T03:31:15.599Z","dependency_job_id":null,"html_url":"https://github.com/paulveillard/cybersecurity-infosec","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paulveillard%2Fcybersecurity-infosec","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paulveillard%2Fcybersecurity-infosec/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paulveillard%2Fcybersecurity-infosec/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/paulveillard%2Fcybersecurity-infosec/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/paulveillard","download_url":"https://codeload.github.com/paulveillard/cybersecurity-infosec/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248191227,"owners_count":21062463,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["information-security","information-security-management","information-security-policies","information-technology","infosec","infrastructure","it","it-security","security","security-scan","security-tools"],"created_at":"2024-12-07T21:10:24.514Z","updated_at":"2025-04-10T09:28:48.397Z","avatar_url":"https://github.com/paulveillard.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Information Security: Theory, Techniques, and Tools\nAn ongoing \u0026 curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Information Security in Cybersecurity.\n\u003e Thanks to all contributors, you're awesome and wouldn't be possible without you! Our goal is to build a categorized community-driven collection of very well-known resources.\n\n[Information Security](https://en.wikipedia.org/wiki/Information_security), sometimes shortened to InfoSec, is the practice of protecting information by mitigating information risks. It is part of information risk management.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/paulveillard/cybersecurity-infosec/blob/main/img/Infosec.png?raw=true\" alt=\"Sublime's custom image\"/\u003e\n\u003c/p\u003e\n\n# Information Security landscape\n\n## `IT Security Vs Computer Security Vs Information Security Vs Cyber Security - What's in a name?`\n- IT Security, Computer Security, Information Security and Cyber Security - all these terms may, at times, seem like gobbledygook but have different connotations. Let's understand each term one at a time.\n\n\n \u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/paulveillard/cybersecurity-infosec/blob/main/img/infosec_2.png?raw=true\" alt=\"Sublime's custom image\"/\u003e\n\u003c/p\u003e\n\n\n#### `IT Security`\n- It focuses on security on IT such as systems that acquire, process and store the information in all format. Systems include network, internal and external, application software, mobile devices, IoT devices, cloud.\n\n#### `Computer Security` \n- Preservation of Confidentiality (C), Integrity (I) and Availability (A) of computer system assets including hardware devices such as servers, laptop, mobile phones; software such as firmware and OS; and network devices such as routers and switches.\n\n#### `Information Security`\n- Ensuring data in any form, digital or physical, is kept secure in terms of preserving its CIA and other additional properties such as authenticity, non-repudiation, accountability and reliability. Since it includes in its scope data in physical form hence the dimension of physical security can't be overlooked.\n\n#### `Cyber Security`\n- Before that we need to understand Cyberspace. Well, cyberspace refers to the Internet and connected entities. Now, we may think of Cyber Security as a subset of Information Security since it is concerned with the information in Cyberspace. Assets in cyberspace include - a) information itself ; b) information infrastructure ; c) non-information assets like energy grid, water supply, IoT.\n\n\n\n#### `What is the main difference between cybersecurity vs information security?`\n\u003e Information security and cybersecurity are often confused. [InfoSec](https://www.cisco.com/c/en/us/products/security/what-is-information-security-infosec.html) is a crucial part of cybersecurity, but it refers exclusively to the processes designed for data security. Cybersecurity is a more general term that includes InfoSec.\n\n#### `What is the main difference between IT Security vs information security?`\n\u003e Do note that IT security is technology oriented whereas Information security is business oriented.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/paulveillard/cybersecurity-infosec/blob/main/img/it_information_2.png?raw=true\" alt=\"Sublime's custom image\"/\u003e\n\u003c/p\u003e\n\n#### `Concepts of  IT Security and Information Security`\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/paulveillard/cybersecurity-infosec/blob/main/img/it_information.png?raw=true\" alt=\"Sublime's custom image\"/\u003e\n\u003c/p\u003e\n\n\n## `Table of Contents`\n- [Information Security](#information-security-landscape)\n- [Adversary Simulation \u0026 Emulation](#adversary-simulation--emulation)\n- [Application Security](#application-security)\n- [Binary Analysis](#binary-analysis)\n- [Cloud Security](#cloud-security)\n- [Courses](#courses)\n- [Cryptography](#cryptography)\n- [Data Sets](#data-sets)\n- [Digital Forensics and Incident Response](#digital-forensics-and-incident-response)\n- [Exploits](#exploits)\n- [Hardening](#hardening)\n- [Hardware](#hardware)\n- [Malware Analysis](#malware-analysis)\n- [Mobile Security](#mobile-security)\n- [Network Security](#network-security)\n- [Open-source Intelligence (OSINT)](#open-source-intelligence-osint)\n- [Password Cracking and Wordlists](#password-cracking-and-wordlists)\n- [Social Engineering](#social-engineering)\n- [Smart Contract](#smart-contract)\n- [Vulnerable](#vulnerable)\n- [Other Courses](#other-courses)\n   - [Massive Online Open Courses](#massive-online-open-courses)\n   - [Academic Courses](#academic-courses)\n   - [Laboratories](#laboratories)\n   - [Capture the Flag](#capture-the-flag)\n   - [Open Security Books](#open-security-books)\n   - [Challenges](#challenges)\n   - [Documentation](#documentation)\n   - [Types of Infosec](#types-of-infosec)\n   - [SecurityTube Playlists](#securitytube-playlists)\n- [License](#license)\n\n**[`^        back to top        ^`](#)**\n\n## Adversary Simulation \u0026 Emulation\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/activeshadow/go-atomicredteam\"\u003eactiveshadow/go-atomicredteam\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ego-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/alphasoc/flightsim\"\u003ealphasoc/flightsim\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA utility to generate malicious network traffic and evaluate controls\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://docs.microsoft.com/en-us/office365/securitycompliance/attack-simulator\"\u003eAttack Simulatorin Office 365\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSimulate realistic attacks on Office 365 environment\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Azure/Cloud-Katana\"\u003eAzure/Cloud-Katana\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUnlocking Serverless Computing to Assess Security Controls\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/blackbotinc/Atomic-Red-Team-Intelligence-C2\"\u003eblackbotinc/Atomic-Red-Team-Intelligence-C2\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.encripto.no/en/downloads-2/tools/\"\u003eBlue Team Training Toolkit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBlue Team Training Toolkit (BT3) is designed for network analysis training sessions, incident response drills and red team engagements\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/center-for-threat-informed-defense/adversary_emulation_library\"\u003ecenter-for-threat-informed-defense/adversary_emulation_library\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Coalfire-Research/Red-Baron\"\u003eCoalfire-Research/Red-Baron\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomate creating resilient, disposable, secure and agile infrastructure for Red Teams\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Cyb3rWard0g/Invoke-ATTACKAPI\"\u003eCyb3rWard0g/Invoke-ATTACKAPI\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA PowerShell script to interact with the MITRE ATT\u0026CK Framework via its own API\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Cyb3rWard0g/mordor\"\u003eCyb3rWard0g/mordor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRe-play Adversarial Techniques\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/chryzsh/DarthSidious/\"\u003echryzsh/DarthSidious\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBuilding an Active Directory domain and hacking it\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/d3vzer0/reternal-quickstart\"\u003ed3vzer0/reternal-quickstart\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eRepo containing docker-compose files and setup scripts without having to clone the individual reternal components\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ElevenPaths/ATTPwn\"\u003eElevenPaths/ATTPwn\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eATTPwn is a computer security tool designed to emulate adversaries.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/endgameinc/RTA\"\u003eendgameinc/RTA\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT\u0026CK\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fozavci/tehsat\"\u003efozavci/tehsat\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTehsat Malware Traffic Generator\u003c/td\u003e\n    \u003c/tr\u003e\n   \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FSecureLABS/leonidas\"\u003eFSecureLABS/leonidas\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomated Attack Simulation in the Cloud, complete with detection use cases.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jymcheong/AutoTTP\"\u003ejymchoeng/AutoTTP\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomated Tactics Techniques \u0026 Procedures\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/lawrenceamer/0xsp-Mongoose\"\u003elawrenceamer/0xsp-Mongoose\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ea unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/microsoft/restler-fuzzer\"\u003emicrosoft/restler-fuzzer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/MiladMSFT/ThreatHunt\"\u003eMiladMSFT/ThreatHunt\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.\u003c/td\u003e\n    \u003c/tr\u003e\n   \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mitre/caldera\"\u003emitre/caldera\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn automated adversary emulation system\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mvelazc0/PurpleSharp\"\u003emvelazc0/PurpleSharp\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NextronSystems/APTSimulator\"\u003eNextronSystems/APTSimulator\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA toolset to make a system look as if it was the victim of an APT attack\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/n0dec/MalwLess\"\u003en0dec/MalwLess\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTest blue team detections without running any attack\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OTRF/Microsoft-Sentinel2Go\"\u003eOTRF/Microsoft-Sentinel2Go\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMicrosoft Sentinel2Go is an open source project developed to expedite the deployment of a Microsoft Sentinel research lab.\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/OTRF/SimuLand\"\u003eOTRF/SimuLand\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eCloud Templates and scripts to deploy mordor environments\u003c/a\u003e\u003c/td\u003e\n\t\u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/praetorian-code/purple-team-attack-automation\"\u003epraetorian-code/purple-team-attack-automation\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003ePraetorian's public release of our Metasploit automation of MITRE ATT\u0026CK™ TTPs\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/qsecure-labs/overlord\"\u003eqsecure-labs/overlord\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOverlord - Red Teaming Infrastructure Automation\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ReconInfoSec/adversary-emulation-map\"\u003eReconInfoSec/adversary-emulation-map\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCreates an ATT\u0026CK Navigator map of an Adversary Emulation Plan\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/redcanaryco/atomic-red-team\"\u003eredcanaryco/atomic-red-team\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSmall and highly portable detection tests based on MITRE's ATT\u0026CK.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/redcanaryco/AtomicTestHarnesses\"\u003eredcanaryco/AtomicTestHarnesses\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePublic Repo for Atomic Test Harness\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/redcanaryco/chain-reactor\"\u003eredcanaryco/chain-reactor\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eChain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/redhuntlabs/RedHunt-OS\"\u003eredhuntlabs/RedHunt-OS\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVirtual Machine for Adversary Emulation and Threat Hunting\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/scythe-io/community-threats\"\u003escythe-io/community-threats\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe GitHub of Adversary Emulation Plans in JSON. Share SCYTHE threats with the community. #ThreatThursday adversary emulation plans are shared here.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SecurityRiskAdvisors/VECTR\"\u003eSecurityRiskAdvisors/VECTR\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SpiderLabs/sheepl\"\u003eSpiderLabs/sheepl\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/splunk/attack_range\"\u003esplunk/attack_range\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eA tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/swimlane/soc-faker\"\u003eswimlane/soc-faker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA python package for use in generating fake data for SOC and security automation.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/TryCatchHCF/DumpsterFire\"\u003eTryCatchHCF/DumpsterFire\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e\"Security Incidents In A Box!\" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/uber-common/metta\"\u003euber-common/metta\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn information security preparedness tool to do adversarial simulation.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://mitre.github.io/unfetter/\"\u003eUnfetter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUnfetter is a project designed to help network defenders, cyber security professionals, and decision makers identify and analyze defensive gaps in a more scalable and repeatable way\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/securityriskadvisors/vectr\"\u003esecurityriskadvisors/vectr\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Application Security\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/aboul3la/Sublist3r\"\u003eaboul3la/Sublist3r\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFast subdomains enumeration tool for penetration testers\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Acheron-VAF/Acheron\"\u003eAcheron-VAF/Acheron\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAcheron is a RESTful vulnerability assessment and management framework built around search and dedicated to terminal extensibility.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ambionics/phpggc\"\u003eambionics/phpggc\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePHPGGC is a library of unserialize() payloads along with a tool to generate them, from command line or programmatically.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/anchore/grype\"\u003eanchore/grype\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA vulnerability scanner for container images and filesystems\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/appsecco/spaces-finder\"\u003eappsecco/spaces-finder\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool to hunt for publicly accessible DigitalOcean Spaces\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/anantshri/svn-extractor\"\u003eanatshri/svn-extractor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSimple script to extract all web resources by means of .SVN folder exposed over network.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/aquasecurity/kube-hunter\"\u003eaquasecurity/kube-hunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHunt for security weaknesses in Kubernetes clusters\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/aquasecurity/trivy\"\u003eaquasecurity/trivy\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Simple and Comprehensive Vulnerability Scanner for Container Images, Git Repositories and Filesystems. Suitable for CI\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ARPSyndicate/kenzer\"\u003eARPSyndicate/kenzer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eautomated web assets enumeration \u0026 scanning\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/barrracud4/image-upload-exploits\"\u003ebarrracud4/image-upload-exploits\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BishopFox/GitGot\"\u003eBishopFox/GitGot\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSemi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BishopFox/h2csmuggler\"\u003eBishopFox/h2csmuggler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHTTP Request Smuggling over HTTP/2 Cleartext (h2c)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/brannondorsey/dns-rebind-toolkit\"\u003ebrannondorsey/dns-rebind-toolkit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA front-end JavaScript toolkit for creating DNS rebinding attacks.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/bridgecrewio/checkov\"\u003ebridgecrewio/checkov\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePrevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/brompwnie/botb\"\u003ebrompwnie/botb\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA container analysis and exploitation tool for pentesters and engineers.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://bugbountyrecon.com/\"\u003eBug Bounty Recon\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBug Bounty Recon (bbrecon) is a Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date map of the Internet \"safe harbor\" attack surface, excluding out-of-scope targets.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Checkmarx/kics\"\u003eCheckmarx/kics\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFind security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/chvancooten/BugBountyScanner\"\u003echvancooten/BugBountyScanner\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/danmar/cppcheck\"\u003edanmar/cppcheck\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003estatic analysis of C/C++ code\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/deepfence/SecretScanner\"\u003edeepfence/SecretScanner\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFind secrets and passwords in container images and file systems\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/deepfence/ThreatMapper\"\u003edeepfence/ThreatMapper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIdentify vulnerabilities in running containers, images, hosts and repositories\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/DefectDojo/django-DefectDojo\"\u003eDefectDojo/django-DefectDojo\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDefectDojo is an open-source application vulnerability correlation and security orchestration tool.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/doyensec/inql\"\u003edoyensec/inql\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInQL - A Burp Extension for GraphQL Security Testing\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/dstotijn/hetty\"\u003edstotijn/hetty\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/EmYiQing/Gososerial\"\u003eEmYiQing/Gososerial\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDynamically Generates Ysoserial's Payload by Golang\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/facebook/pyre-check/\"\u003efacebook/pyre-check/\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePerformant type-checking for python.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Findomain/Findomain\"\u003eFindomain/Findomain\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe fastest and cross-platform subdomain enumerator, do not waste your time.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fkie-cad/cwe_checker\"\u003efkie-cad/cwe_checker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ecwe_checker finds vulnerable patterns in binary executables\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/atheris\"\u003egoogle/atheris\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAtheris is a coverage-guided Python fuzzing engine. It supports fuzzing of Python code, but also native extensions written for CPython. Atheris is based off of libFuzzer. When fuzzing native code, Atheris can be used in combination with Address Sanitizer or Undefined Behavior Sanitizer to catch extra bugs.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/googleprojectzero/weggli\"\u003egoogleprojectzero/weggli\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eweggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://huntersuite.io/\"\u003eHunterSuite\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHunterSuite is the next generation offensive security suite. It will automate all the tedious tasks during a test just with few clicks. If you are a penetration tester, red teamer, bug bounty hunter, or you work as an offensive security engineer, you will love what HunterSuite has to offer.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://illuminatejs.geeksonsecurity.com/\"\u003eIlluminateJs\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIlluminateJs is a static javascript analysis engine (a deobfuscator so to say) aimed to help analyst understand obfuscated and potentially malicious JavaScript Code.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ismailtasdelen/xss-payload-list\"\u003eismailtasdelen/xss-payload-list\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCross Site Scripting ( XSS ) Vulnerability Payload List\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jonluca/Anubis\"\u003ejonluca/Anubis\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSubdomain enumeration and information gathering tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/LanikSJ/dfimage\"\u003eLanikSJ/dfimage\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eReverse-engineer a Dockerfile from a Docker image.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/lelinhtinh/de4js\"\u003elelinhtinh/de4js\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eJavaScript Deobfuscator and Unpacker\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mazen160/bfac\"\u003emazen160/bfac\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/microsoft/onefuzz\"\u003emicrosoft/onefuzz\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA self-hosted Fuzzing-As-A-Service platform\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mindedsecurity/JStillery\"\u003emindedsecurity/JStillery\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAdvanced JS Deobfuscation via Partial Evaluation.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mwrlabs/dref\"\u003emwrlabs/dref\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDNS Rebinding Exploitation Framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/singularity\"\u003enccgroup/singularity\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA DNS rebinding attack framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/whalescan\"\u003enccgroup/whalescan\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWhalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NetSPI/AutoDirbuster\"\u003eNetSPI/AutoDirbuster\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomatically run and save Dirbuster scans for multiple IPs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NetSPI/PowerUpSQL\"\u003eNetSPI/PowerUpSQL\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePowerUpSQL: A PowerShell Toolkit for Attacking SQL Server\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NotSoSecure/SerializedPayloadGenerator\"\u003eNotSoSecure/SerializedPayloadGenerator\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIt's Web Interface to generate payload using various deserialization exploitation framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ossf/allstar\"\u003eossf/allstar\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGitHub App to set and enforce security policies\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ossf/scorecard\"\u003eossf/scorecard\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSecurity Scorecards - Security health metrics for Open Source\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OJ/gobuster\"\u003eOJ/gobuster\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDirectory/File, DNS and VHost busting tool written in Go\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OWASP/Nettacker\"\u003eOWASP/Nettacker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OWASP/wstg\"\u003eOWASP/wstg\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project\"\u003eOWASP Zed Attack Proxy Project\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by hundreds of international volunteers\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/praetorian-inc/gokart\"\u003epraetorian-inc/gokart\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA static analysis tool for securing Go code\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/praetorian-inc/snowcat\"\u003epraetorian-inc/snowcat\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ea tool to audit the istio service mesh\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/presidentbeef/brakeman\"\u003epresidentbeef/brakeman\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA static analysis security vulnerability scanner for Ruby on Rails applications\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://publicwww.com/\"\u003ePublic WWW\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSource Code Search Engine\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/pumasecurity/puma-scan\"\u003epumasecurity/puma-scan\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePuma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/pwntester/ysoserial.net\"\u003epwntester/ysoserial.net\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDeserialization payload generator for a variety of .NET formatters\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/quarkslab/kdigger\"\u003equarkslab/kdigger\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ekdigger is a context discovery tool for Kubernetes penetration testing.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/redphx/localify\"\u003eredphx/localify\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEffectively debug minified JS files\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RedTeamPentesting/monsoon\"\u003eRedTeamPentesting/monsoon\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFast HTTP enumerator\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RhinoSecurityLabs/IPRotate_Burp_Extension\"\u003eRhinoSecurityLabs/IPRotate_Burp_Extension\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eExtension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RhinoSecurityLabs/SleuthQL\"\u003eRhinoSecurityLabs/SleuthQL\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/rpgeeganage/audit-node-modules-with-yara\"\u003erpgeeganage/audit-node-modules-with-yara\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAudit Node Module folder with YARA rules to identify possible malicious packages hiding in node_moudles\u003c/td\u003e\n    \u003c/tr\u003e\n     \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/s0md3v/XSStrike\"\u003es0md3v/XSStrike\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMost advanced XSS detection suite\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/salesforce/DazedAndConfused\"\u003esalesforce/DazedAndConfused\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDazedAndConfused is a tool to help determine dependency confusion exposure.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Screetsec/Sudomy\"\u003eScreetsec/Sudomy\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/securego/gosec\"\u003esecurego/gosec\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGolang security checker\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://snyk.io/\"\u003eSnyk\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eContinuously find \u0026 fix vulnerabilities in your dependencies\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sslab-gatech/Rudra\"\u003esslab-gatech/Rudra\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRust Memory Safety \u0026 Undefined Behavior Detection\u003c/td\u003e\n    \u003c/tr\u003e\n   \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/subfinder/subfinder\"\u003esubfinder/subfinder\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/vchinnipilli/kubestriker\"\u003evchinnipilli/kubestriker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Blazing fast Security Auditing tool for Kubernetes\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https//github.com/visma-prodsec/confused\"\u003evisma-prodsec/confused\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTool to check for dependency confusion vulnerabilities in multiple package management systems\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/wallarm/gotestwaf\"\u003ewallarm/gotestwaf\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGo Test WAF project, a tool to test different WAF detects for apps and APIs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/wagiro/BurpBounty\"\u003ewagiro/BurpBounty\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBurp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/wagoodman/dive\"\u003ewagoodman/dive\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool for exploring each layer in a docker image\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://docs.wpdc.org/\"\u003ewpdc\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDetect malicious dependencies, magecart, malvertising, and more on your web properties!\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/xmendez/wfuzz\"\u003exmendez/wfuzz\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload.\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/Yelp/detect-secrets\"\u003eYelp/detect-secrets\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eAn enterprise friendly way of detecting and preventing secrets in code.\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ZupIT/horusec\"\u003eZupIT/horusec\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Binary Analysis\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/acsdavid97/DotNetHooker\"\u003eacsdavid97/DotNetHooker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAPI tracing and argument dumping to ease reverse engineering .NET malware.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Air14/HyperHide\"\u003eAir14/HyperHide\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHypervisor based anti anti debug plugin for x64dbg\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ajpc500/RelayRumbler\"\u003eajpc500/RelayRumbler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/avast-tl/retdec\"\u003eavast-tl/retdec\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRetDec is a retargetable machine-code decompiler based on LLVM\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://binvis.io/#/\"\u003ebinvis.io\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003evisual analysis of binary files\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/blackberry/pe_tree\"\u003eblackberry/pe_tree\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro to dump in-memory PE files and reconstruct imports.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://git.sr.ht/~prabhu/blint\"\u003eBLint\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBLint is a Binary Linter to check the security properties, and capabilities in your executables. It is powered by lief\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/bootleg/ret-sync\"\u003ebootleg/ret-sync\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra disassemblers.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/can1357/NoVmp\"\u003ecan1357/NoVmp\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA static devirtualizer for VMProtect x64 3.x. powered by VTIL.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/carbonblack/binee\"\u003ecarbonblack/binee\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBinee: binary emulation environment\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Cisco-Talos/GhIDA\"\u003eCisco-Talos/GhIDA\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in IDA.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Cisco-Talos/Ghidraaas\"\u003eCisco-Talos/Ghidraaas\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGhidraaas is a simple web server that exposes Ghidra analysis through REST APIs. The project includes three Ghidra plugins to analyze a sample, get the list of functions and to decompile a function.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/certcc/kaiju\"\u003ecertcc/kaiju\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Comsecuris/gdbghidra\"\u003eComsecuris/gdbghidra\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003egdbghidra - a visual bridge between a GDB session and GHIDRA\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Comsecuris/gdbida\"\u003eComsecuris/gdbida\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003egdbida - a visual bridge between a GDB session and IDA Pro's disassembler\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://cutter.re/\"\u003eCutter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFree and Open Source RE Platform powered by radare2\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/DarthTon/Blackbone\"\u003eDarthTon/Blackbone\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWindows memory hacking library\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/dr4k0nia/Unscrambler\"\u003edr4k0nia/Unscrambler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUniversal unpacker and fixer for a number of modded ConfuserEx protections\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/endgameinc/xori\"\u003eendgameinc/xori\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eXori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/enkomio/shed\"\u003eenkomio/shed\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e.NET runtine inspector. \u003ca href=\"http://antonioparata.blogspot.it/2017/11/shed-inspect-net-malware-like-sir.html\"\u003eShed - Inspect .NET malware like a Sir\u003c/a\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FernandoDoming/r2diaphora\"\u003eFernandoDoming/r2diaphora\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003er2diaphora is a port of Diaphora to radare2 and MySQL. It also uses r2ghidra as decompiler by default, with support for other decompilers such as pdc.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/flare-emu\"\u003eflare-emu\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eflare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorns emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.fibratus.io/\"\u003efibratus\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA modern tool for the Windows kernel exploration and observability\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/capa\"\u003efireeye/capa\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ecapa detects capabilities in executable files. You run it against a PE file or shellcode and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing services, or relies on HTTP to communicate.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/capa-rules\"\u003efireeye/capa-rules\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eStandard collection of rules for capa: the tool for enumerating the capabilities of programs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/flare-floss\"\u003efireeye/flare-floss\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/speakeasy\"\u003efireeye/speakeasy\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSpeakeasy is a portable, modular, binary emulator designed to emulate Windows kernel and user mode malware.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n\t    \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/stringsifter\"\u003efireeye/stringsifter\u003c/a\u003e\u003c/td\u003e\n\t    \u003ctd\u003eA machine learning tool that ranks strings based on their relevance for malware analysis.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/forrest-orr/moneta\"\u003eforrest-orr/moneta\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMoneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FuzzySecurity/Dendrobate\"\u003eFuzzySecurity/Dendrobate\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eManaged code hooking template.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FuzzySecurity/Fermion\"\u003eFuzzySecurity/Fermion\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFermion, an electron wrapper for Frida \u0026 Monaco.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/gaasedelen/tenet\"\u003egaasedelen/tenet\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Trace Explorer for Reverse Engineers\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/GaloisInc/reopt\"\u003eGaloisInc/reopt\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool for analyzing x86-64 binaries.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://ghidra-sre.org/\"\u003eGHIDRA\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA software reverse engineering (SRE) suite of tools developed by NSA's Research Directorate in support of the Cybersecurity mission\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://go-re.tk/\"\u003eGo Reverse Engineering Toolkit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Reverse Engineering Tool Kit for Go, Written in Go.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/goretk/redress\"\u003egoretk/redress\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRedress - A tool for analyzing stripped Go binaries\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/grimm-co/GEARSHIFT\"\u003egrimm-co/GEARSHIFT\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGEARSHIFT is a tool that performs structure recovery for a specified function within a stripped binary. It also generates a fuzz harness that can be used to call functions in a shared object (.so) or dynamically linked library (.dll) file.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/guelfoweb/peframe\"\u003eguelfoweb/peframe\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hasherezade/hollows_hunter\"\u003ehasherezade/hollows_hunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA process scanner detecting and dumping hollowed PE modules.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hasherezade/hook_finder\"\u003ehasherezade/hook_finder\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ea small tool for investigating inline hooks (and other in-memory code patches)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hasherezade/pe_to_shellcode\"\u003ehasherezade/pe_to_shellcode\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eConverts PE into a shellcode\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/herosi/CTO\"\u003eherosi/CTO\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCall Tree Overviewer\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/HyperDbg/HyperDbg\"\u003eHyperDbg/HyperDbg\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Source Code of HyperDbg Debugger 🐞\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hzqst/unicorn_pe\"\u003ehzqst/unicorn_pe\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUnicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://kaitai.io\"\u003eKaitai Struct\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eKaitai Struct is a declarative language used to describe various binary data structures, laid out in files or in memory: i.e. binary file formats, network stream packet formats, etc.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://lief.quarkslab.com/\"\u003eLIEF\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLibrary to Instrument Executable Formats\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Martyx00/CollaRE\"\u003eMartyx00/CollaRE\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCollareRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate locations.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Microsoft/binskim\"\u003eMicrosoft/binskim\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA binary static analysis tool that provides security and correctness results for Windows portable executables\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Microsoft/ProcDump-for-Linux\"\u003eMicrosoft/ProcDump-for-Linux\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Linux version of the ProcDump Sysinternals tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/MITRECND/malchive\"\u003eMITRECND/malchive\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVarious capabilities for static malware analysis.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mrphrazer/obfuscation_detection\"\u003emrphrazer/obfuscation_detection\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCollection of scripts to pinpoint obfuscated code\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mxmssh/drltrace\"\u003emxmssh/drltrace\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDrltrace is a library calls tracer for Windows and Linux applications\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NASA-SW-VnV/ikos\"\u003eNASA-SW-VnV/ikos\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIKOS (Inference Kernel for Open Static Analyzers) is a static analyzer for C/C++ based on the theory of Abstract Interpretation\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nsacyber/BAM\"\u003ensacyber/BAM\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/WindowsMemPageDelta\"\u003enccgroup/WindowsMemPageDelta\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OALabs/hashdb-ida\"\u003eOALabs/hashdb-ida\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHashDB API hash lookup plugin for IDA Pro\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/osandov/drgn\"\u003eosandov/drgn\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eProgrammable debugger\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/pierrezurek/Signsrch\"\u003epierrezurek/Signsrch\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003etool for searching signatures inside files, extremely useful in reversing engineering for figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. it can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at runtime and easy to modify.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://rayanfam.com/topics/pinitor/\"\u003ePinitor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn API Monitor Based on Pin\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://pypi.org/project/pygore/\"\u003epygore\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython library for analyzing Go binaries\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/qilingframework/qiling\"\u003eqilingframework/qiling\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eQiling Advanced Binary Emulation Framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/revng/pagebuster\"\u003erevng/pagebuster\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePageBuster - dump all executable pages of packed processes.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/REW-sploit/REW-sploit\"\u003eREW-sploit/REW-sploit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEmulate and Dissect MSF and *other* attacks\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://rizin.re/\"\u003erizin\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFree and Open Source Reverse Engineering Framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/secretsquirrel/recomposer\"\u003esecretsquirrel/recomposer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sibears/IDAGolangHelper\"\u003esibears/IDAGolangHelper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSet of IDA Pro scripts for parsing GoLang types information stored in compiled binary\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/strazzere/golang_loader_assist\"\u003estrazzere/golang_loader_assist\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMaking GO reversing easier in IDA Pro\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/taviso/loadlibrary\"\u003etaviso/loadlibrary\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePorting Windows Dynamic Link Libraries to Linux\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/unipacker/unipacker\"\u003eunipacker/unipacker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomatic and platform-independent unpacker for Windows binaries based on emulation\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/utkonos/lst2x64dbg\"\u003eutkonos/lst2x64dbg\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eExtract labels from IDA, Ghidra, Binary Ninja, and Relyze files and export x64dbg database. Including radare2 main address.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://codisec.com/veles/\"\u003eVeles\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eNew open source tool for binary data analysis\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://salmanarif.bitbucket.io/visual/index.html\"\u003eVisUAL\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA highly visual ARM emulator\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://githacks.org/vmp2/vmemu\"\u003evmp2/vmemu\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVMProtect 2 Virtual Machine Handler Emulation\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Wenzel/checksec.py\"\u003eWenzel/checksec.py\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eChecksec tool in Python, Rich output. Based on LIEF\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/WerWolv/ImHex\"\u003eWerWolv/ImHex\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\n            \u003ca href=\"https://github.com/williballenthin/python-idb\"\u003ewilliballenthin/python-idb\u003c/a\u003e\n        \u003c/td\u003e\n        \u003ctd\u003e\n            Pure Python parser and analyzer for IDA Pro database files (.idb).\n        \u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Cloud Security\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/0xsha/CloudBrute/\"\u003e0xsha/CloudBrute\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty hunters, red teamers, and penetration testers alike.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Alfresco/prowler\"\u003eAlfresco/prowler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTool for AWS security assessment, auditing and hardening. It follows guidelines of the CIS Amazon Web Services Foundations Benchmark.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/andresriancho/nimbostratus\"\u003eandresriancho/nimbostratus\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTools for fingerprinting and exploiting Amazon cloud infrastructures\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://asecure.cloud/\"\u003easecure.cloud\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eA free repository of customizable AWS security configurations and best practices\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://bitbucket.org/asecurityteam/spacecrab\"\u003easecurityteam/spacecrab\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBootstraps an AWS account with everything you need to generate, mangage, and distribute and alert on AWS honey tokens. Made with breakfast roti by the Atlassian security team.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/aws-cloudformation/cloudformation-guard\"\u003eaws-cloudformation/cloudformation-guard\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGuard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/awslabs/aws-security-benchmark\"\u003eawslabs/aws-security-benchmark\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOpen source demos, concept and guidance related to the AWS CIS Foundation framework.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Azure/Stormspotter\"\u003eAzure/Stormspotter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAzure Red Team tool for graphing Azure and Azure Active Directory objects\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BishopFox/iam-vulnerable\"\u003eBishopFox/iam-vulnerable\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUse Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BishopFox/smogcloud\"\u003eBishopFox/smogcloud\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFind cloud assets that no one wants exposed\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BloodHoundAD/AzureHound\"\u003eBloodHoundAD/AzureHound\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAzure Hound\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/bridgecrewio/cdkgoat\"\u003ebridgecrewio/cdkgoat\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eCdkGoat is Bridgecrew's \"Vulnerable by Design\" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.\u003c/td\u003e\n\t\u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/bridgecrewio/cfngoat\"\u003ebridgecrewio/cfngoat\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eCfngoat is Bridgecrew's \"Vulnerable by Design\" Cloudformation repository. Cfngoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/carnal0wnage/weirdAAL/wiki\"\u003ecarnal0wnage/weirdAAL\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWeirdAAL [AWS Attack Library] wiki!\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cisagov/Sparrow\"\u003ecisagov/Sparrow\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cloud-sniper/cloud-sniper\"\u003ecloud-sniper/cloud-sniper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloud Security Operations Orchestrator\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cloudquery/cloudquery\"\u003ecloudquery/cloudquery\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ecloudquery transforms your cloud infrastructure into queryable SQL tables for easy monitoring, governance and security.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cloudsploit/scans\"\u003ecloudsploit/scans\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAWS security scanning checks\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cr0hn/festin\"\u003ecr0hn/festin\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFestIn is a tool for discovering open S3 Buckets starting from a domains.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CrowdStrike/CRT\"\u003eCrowdStrike/CRT\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis tool queries the following configurations in the Azure AD/O365 tenant which can shed light on hard to find permissions and configuration settings in order to assist organizations in securing these environments.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cyberark/blobhunter\"\u003ecyberark/blobhunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFind exposed data in Azure with this public blob scanner\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cyberark/SkyArk\"\u003ecyberark/SkyArk\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSkyArk is a cloud security tool, helps to discover, assess and secure the most privileged entities in AWS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cyberark/SkyWrapper\"\u003ecyberark/SkyWrapper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/dagrz/aws_pwn\"\u003edagrz/aws_pwn\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA collection of AWS penetration testing junk\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/darkbitio/aws-recon\"\u003edarkbitio/aws-recon\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMulti-threaded AWS inventory collection tool with a focus on security-relevant resources and metadata.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/darkquasar/AzureHunter\"\u003edarkquasar/AzureHunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/disruptops/cred_scanner\"\u003edisruptops/cred_scanner\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA simple file-based scaner to look for potential AWS accesses and secret keys in files\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/duo-labs/cloudtracker\"\u003eduo-labs/cloudtracker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/duo-labs/cloudmapper\"\u003eduo-labs/cloudmapper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudMapper helps you analyze your Amazon Web Services (AWS) environments.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/endgameinc/varna\"\u003eendgameinc/varna\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eVarna: Quick \u0026 Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/eth0izzle/bucket-stream\"\u003eeth0izzle/bucket-stream\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFind interesting Amazon S3 Buckets by watching certificate transparency logs.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FishermansEnemy/bucket_finder\"\u003eFishermansEnemy/bucket_finder\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAmazon bucket brute force tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FSecureLABS/Azurite\"\u003eFSecureLABS/Azurite\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEnumeration and reconnaissance activities in the Microsoft Azure Cloud.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/glen-mac/goGetBucket\"\u003eglen-mac/goGetBucket\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/cloud-forensics-utils\"\u003egoogle/cloud-forensics-utils\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython library to carry out DFIR analysis on the Cloud\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hausec/PowerZure\"\u003ehausec/PowerZure\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePowerShell framework to assess Azure security\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/initstring/cloud_enum\"\u003einitstring/cloud_enum\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMulti-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jonrau1/ElectricEye\"\u003ejonrau1/ElectricEye\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eContinuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jordanpotti/AWSBucketDump\"\u003ejordanpotti/AWSBucketDump\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSecurity Tool to Look For Interesting Files in S3 Buckets\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jordanpotti/CloudScraper\"\u003ejordanpotti/CloudScraper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/kromtech/s3-inspector\"\u003ekromtech/s3-inspector\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTool to check AWS S3 bucket permissions\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/lyft/metadataproxy\"\u003elyft/metadataproxy\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA proxy for AWS's metadata service that gives out scoped IAM credentials from STS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/MindPointGroup/cloudfrunt\"\u003eMindPointGroup/cloudfrunt\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool for identifying misconfigured CloudFront domains\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/aws-inventory\"\u003enccgroup/aws-inventory\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDiscover resources created in an AWS account\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/rootsecdev/Azure-Red-Team\"\u003enccgroup/azucar\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSecurity auditing tool for Azure environments\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/PMapper\"\u003enccgroup/PMapper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool for quickly evaluating IAM permissions in AWS.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/s3_objects_check\"\u003enccgroup/s3_objects_check\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWhitebox evaluation of effective S3 object permissions, in order to identify publicly accessible objects.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/Scout2\"\u003enccgroup/Scout2\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSecurity auditing tool for AWS environments\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nccgroup/ScoutSuite\"\u003enccgroup/ScoutSuite\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eScout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Netflix-Skunkworks/diffy\"\u003eNetflix-Skunkworks/diffy\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDiffy is a digital forensics and incident response (DFIR) tool developed by Netflix's Security Intelligence and Response Team (SIRT).\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Netflix/security_monkey\"\u003eNetflix/security_monkey\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSecurity Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure configurations.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NetSPI/aws_consoler\"\u003eNetSPI/aws_consoler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA utility to convert your AWS CLI credentials into AWS console access.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NetSPI/MicroBurst\"\u003eNetSPI/MicroBurst\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA collection of scripts for assessing Microsoft Azure security\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NotSoSecure/cloud-service-enum/\"\u003eNotSoSecure/cloud-service-enum\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis script allows pentesters to validate which cloud tokens (API keys, OAuth tokens and more) can access which cloud service.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/prevade/cloudjack\"\u003eprevade/cloudjack\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRoute53/CloudFront Vulnerability Assessment Utility\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https//github.com/projectdiscovery/cloudlist\"\u003eprojectdiscovery/cloudlist\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudlist is a tool for listing Assets from multiple Cloud Providers.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/pumasecurity/serverless-prey\"\u003epumasecurity/serverless-prey\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eServerless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/random-robbie/slurp\"\u003erandom-robbie/slurp\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEnumerate S3 buckets via certstream, domain, or keywords\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RhinoSecurityLabs/cloudgoat\"\u003eRhinoSecurityLabs/cloudgoat\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudGoat is Rhino Security Labs' \"Vulnerable by Design\" AWS deployment tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RhinoSecurityLabs/pacu\"\u003eRhinoSecurityLabs/pacu\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRhino Security Labs' AWS penetration testing toolkit\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RiotGames/cloud-inquisitor\"\u003eRiotGames/cloud-inquisitor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEnforce ownership and data security within AWS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sa7mon/S3Scanner\"\u003esa7mon/S3Scanner\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eScan for open S3 buckets and dump\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/salesforce/cloudsplaining\"\u003esalesforce/cloudsplaining\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report with a triage worksheet\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sendgrid/krampus\"\u003esendgrid/krampus\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe original AWS security enforcer™\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SecurityFTW/cs-suite\"\u003eSecurityFTW/cs-suite\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCloud Security Suite - One stop tool for auditing the security posture of AWS infrastructure.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/soteria-security/365Inspect\"\u003esoteria-security/365Inspect\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA PowerShell script that automates the security assessment of Microsoft Office 365 environments.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/spacesiren/spacesiren\"\u003espacesiren/spacesiren\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA honey token manager and alert system for AWS.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/swimlane/CLAW\"\u003eswimlane/CLAW\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA packer utility to create and capture DFIR Image for use AWS \u0026 Azure\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/theflakes/reg_hunter\"\u003etheflakes/reg_hunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBlueteam operational triage registry hunting/forensic tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ThreatResponse/margaritashotgun\"\u003eThreatResponse/margaritashotgun\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRemote Memory Acquisition Tool for AWS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ThreatResponse/aws_ir\"\u003eThreatResponse/aws_ir\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython installable command line utiltity for mitigation of host and key compromises.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/toniblyx/prowler\"\u003etoniblyx/prowler\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTool based on AWS-CLI commands for AWS account security assessment and hardening, following guidelines of the CIS Amazon Web Services Foundations Benchmark 1.1\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/widdix/aws-s3-virusscan\"\u003ewiddix/aws-s3-virusscan\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAntivirus for Amazon S3 buckets\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Courses\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/specterops/at-ps\"\u003especterops/at-ps\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAdversary Tactics - PowerShell Training\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Cryptography\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Balasys/dheater\"\u003eBalasys/dheater\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eD(HE)ater is a security tool can perform DoS attack by enforcing the DHE key exchange.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CERTCC/keyfinder\"\u003eCERTCC/keyfinder\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool for analyzing private (and public) key files, including support for Android APK files.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://certdb.com\"\u003eCertDB\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInternet-wide search engine for digital certificates\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Ciphey/Ciphey\"\u003eCiphey/Ciphey\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomatically decode encryptions without a key, decode encodings, and crack hashes\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/corkami/pocs/\"\u003ecorkami/pocs\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eProof of Concepts (PE, PDF...)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mpgn/BEAST-PoC\"\u003empgn/BEAST-PoC\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePoc of BEAST attack against SSL/TLS\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mpgn/Padding-oracle-attack\"\u003empgn/Padding-oracle-attack\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePadding oracle attack against PKCS7\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mpgn/poodle-PoC\"\u003empgn/poodle-PoC\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePoodle (Padding Oracle On Downgraded Legacy Encryption) attack\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mxrch/evilize\"\u003emxrch/evilize\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUse md5-collisions to make evil executables looking like a good one.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/salesforce/ja3\"\u003esalesforce/ja3\u003c/td\u003e\n        \u003ctd\u003eJA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Data Sets\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.splunk.com/blog/2018/05/10/boss-of-the-soc-scoring-server-questions-and-answers-and-dataset-open-sourced-and-ready-for-download.html\"\u003eBOTS 1.0 Dataset\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe BOTS 1.0 dataset records two attacks perpetrated by a fictitious hacktivist group called po1s0n1vy targeting Wayne Corp of Batman mythology. There are many comic book references in the data; from heroes and villains to “Batman’s” street addresses. Not only does the dataset have many different types of data—everything from Sysmon to Suricata—but there are even file hashes that can be found in Virustotal.com and domains/IPs to hunt for in OSINT tools like PassiveTotal and Robtex!\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://dataplane.org/\"\u003eDataPlane.org\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. We provide reliable and trustworthy service at no cost.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://toolbox.google.com/datasetsearch\"\u003eGoogle Dataset Search\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGoogle Dataset Search\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FiveDirections/OpTC-data\"\u003eFiveDirections/OpTC-data\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOperationally Transparent Cyber (OpTC) Data\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/intel/yarpgen\"\u003eintel/yarpgen\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eYet Another Random Program Generator\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.kaggle.com/ymirsky/network-attack-dataset-kitsune\"\u003eKitsune Network Attack Dataset\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eNine labeled attacks with extracted features and the original network capture\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nimrodpar/Labeled-Elfs\"\u003enimrodpar/Labeled-Elfs\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA collection of well labeled ELF binaries compiled from benign and malicious code in various ways. Great for exploring similarity in executables and training various ML models.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://securitydatasets.com/introduction.html\"\u003eSecurity Datasets\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"http://www.secrepo.com/\"\u003eSecRepo.com - Samples of Security Related Data\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFinding samples of various types of Security related can be a giant pain. This is my attempt to keep a somewhat curated list of Security related data I've found, created, or was pointed to. If you perform any kind of analysis with any of this data please let me know and I'd be happy to link it from here or host it here. Hopefully by looking at others research and analysis it will inspire people to add-on, improve, and create new ideas.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sophos-ai/SOREL-20M\"\u003esophos-ai/SOREL-20M\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSophos-ReversingLabs 20 million sample dataset\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/splunk/attack_data\"\u003esplunk/attack_data\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Repository of curated datasets from various attacks\u003c/td\u003e\n    \u003c/tr\u003e\n\u003c/table\u003e\n\n## Digital Forensics and Incident Response\n\n\u003ctable\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003cb\u003eLink\u003c/b\u003e\u003c/td\u003e\n        \u003ctd\u003e\u003cb\u003eDescription\u003c/b\u003e\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.flashbackdata.com/free-forensics-tool-i-file-parser/\"\u003e$I File Parser\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFree Forensics Tool – \\$I File Parser\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/3CORESec/Automata\"\u003e3CORESec/Automata\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomatic detection engineering technical state compliance\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Accenture/docker-plaso\"\u003eAccenture/docker-plaso\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDocker container for plaso supertimlining tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/activecm/BeaKer\"\u003eactivecm/BeaKer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBeacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/activecm/espy/\"\u003eactivecm/espy/\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEndpoint detection for remote hosts for consumption by RITA and Elasticsearch\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ahmedkhlief/APT-Hunter\"\u003eahmedkhlief/APT-Hunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAPT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.alienvault.com/products/ossim\"\u003eAlienVault OSSIM\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAlienVault OSSIM: The World’s Most Widely Used Open Source SIEM\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/andreafortuna/autotimeliner\"\u003eandreafortuna/autotimeliner\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eAutomagically extract forensic timeline from volatile memory dump\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ANSSI-FR/bits_parser\"\u003eANSSI-FR/bits_parser\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eExtract BITS jobs from QMGR queue and store them as CSV records\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ANSSI-FR/bmc-tools\"\u003eANSSI-FR/bmc-tools\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRDP Bitmap Cache Parser\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ANSSI-FR/DFIR-O365RC\"\u003eANSSI-FR/DFIR-O365RC\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePowerShell module for Office 365 and Azure AD log collection\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/aquasecurity/tracee\"\u003eaquasecurity/tracee\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLinux Runtime Security and Forensics using eBPF\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://arsenalrecon.com/downloads/\"\u003eArsenal Recon Free Tools\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eArsenal Recon Free Tools\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/bfuzzy/auditd-attack\"\u003ebfuzzy/auditd-attack\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Linux Auditd rule set mapped to MITRE's Attack Framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Broctets-and-Bytes/Darwin\"\u003eBroctets-and-Bytes/Darwin\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis script is designed to be run against a mounted image, live system, or device in target disk mode. The script automates the collection of key files for MacOS investigations.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/bromiley/olaf\"\u003ebromiley/olaf\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOffice365 Log Analysis Framework: OLAF is a collection of tools, scripts, and analysis techniques dealing with O365 Investigations.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/BSI-Bund/RdpCacheStitcher\"\u003eBSI-Bund/RdpCacheStitcher\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/carmaa/inception\"\u003ecarmaa/inception\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CCob/BeaconEye\"\u003eCCob/BeaconEye\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHunts out CobaltStrike beacons and logs operator command output\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.cerebrate-project.org/\"\u003eCerebrate Project\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools (such as MISP).\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/chrisandoryan/Nethive-Project\"\u003echrisandoryan/Nethive-Project\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRestructured and Collaborated SIEM and CVSS Infrastructure. Presented at Blackhat Asia Arsenal 2020.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cisagov/CHIRP\"\u003ecisagov/CHIRP\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA forensic collection tool written in Python.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/coinbase/dexter\"\u003ecoinbase/dexter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eForensics acquisition framework designed to be extensible and secure\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ComodoSecurity/openedr\"\u003eComodoSecurity/openedr\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOpen EDR public repository\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/countercept/chainsaw\"\u003ecountercept/chainsaw\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eRapidly Search and Hunt through Windows Event Logs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CrowdStrike/automactc\"\u003eCrowdStrike/automactc\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutoMacTC: Automated Mac Forensic Triage Collector\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CrowdStrike/Forensics\"\u003eCrowdStrike/Forensics\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eScripts and code referenced in CrowdStrike blog posts\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CrowdStrike/SuperMem\"\u003eCrowdStrike/SuperMem\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA python script developed to process Windows memory images based on triage type.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cryps1s/DARKSURGEON\"\u003ecryps1s/DARKSURGEON\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/cyb3rfox/Aurora-Incident-Response\"\u003ecyb3rfox/Aurora-Incident-Response\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIncident Response Documentation made easy. Developed by Incident Responders for Incident Responders\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Cyb3rWard0g/HELK\"\u003eCyb3rWard0g/HELK\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Hunting ELK (Elasticsearch, Logstash, Kibana) with advanced analytic capabilities.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://car.mitre.org/\"\u003eCyber Analytics Repository\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe MITRE Cyber Analytics Repository (CAR) is a knowledge base of analytics developed by MITRE based on the MITRE ATT\u0026CK adversary model.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/CyberDefenseInstitute/CDIR\"\u003eCyberDefenseInstitute/CDIR\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCDIR (Cyber Defense Institute Incident Response) Collector - live collection tool based on oss tool/library\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/D4stiny/PeaceMaker\"\u003eD4stiny/PeaceMaker\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/DamonMohammadbagher/ETWProcessMon2\"\u003eDamonMohammadbagher/ETWProcessMon2\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection etc.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/davehull/Kansa\"\u003edavehull/Kansa\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Powershell incident response framework\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/deepalert/deepalert\"\u003edeepalert/deepalert\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eServerless SOAR (Security Orchestration, Automation and Response) framework for automatic inspection and evaluation of security alert\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://dfir-orc.github.io/\"\u003eDFIR ORC\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDFIR ORC, where ORC stands for “Outil de Recherche de Compromission” in French, is a collection of specialized tools dedicated to reliably parse and collect critical artefacts such as the MFT, registry hives or event logs. It can also embed external tools and their configurations.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/DFIRKuiper/Kuiper\"\u003eDFIRKuiper/Kuiper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDigital Forensics Investigation Platform\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://info.digitalguardian.com/wingman.html\"\u003eDG Wingman\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDG Wingman is a free community Windows tool designed to aid in the collection of forensic evidence in order to properly investigate and scope an intrusion.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/dhondta/AppmemDumper\"\u003edhondta/AppmemDumper\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eForensics triage tool relying on Volatility and Foremost\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/draios/sysdig\"\u003edraios/sysdig\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLinux system exploration and troubleshooting tool with first class support for containers\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/drego85/meioc\"\u003edrego85/meioc\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eExtracting IoC data from eMail\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/ARDvark\"\u003efireeye/ARDvark\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/SilkETW\"\u003efireeye/SilkETW\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSilkETW \u0026 SilkService are flexible C# wrappers for ETW, they are meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/fireeye/ThreatPursuit-VM\"\u003efireeye/ThreatPursuit-VM\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThreat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ForensicArtifacts/artifacts\"\u003eForensicArtifacts/artifacts\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDigital Forensics Artifact Repository\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/frikky/Shuffle\"\u003efrikky/Shuffle\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eShuffle: A general purpose security automation platform platform. We focus on accessibility for all.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/FSecureLABS/LinuxCatScale\"\u003eFSecureLABS/LinuxCatScale\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIncident Response collection and processing scripts with automated reporting scripts\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/G-Research/siembol\"\u003eG-Research/siembol\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn open-source, real-time Security Information \u0026 Event Management tool based on big data technologies, providing a scalable, advanced security analytics framework.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/gleeda/memtriage\"\u003egleeda/memtriage\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAllows you to quickly query a Windows machine for RAM artifacts\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/docker-explorer/\"\u003egoogle/docker-explorer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA tool to help forensicate offline docker acquisitions\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/GiftStick\"\u003egoogle/GiftStick\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e1-Click push forensics evidence to the cloud\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/grr\"\u003egoogle/grr\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGRR is a python client (agent) that is installed on target systems, and python server infrastructure that can manage and talk to clients.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/rekall\"\u003egoogle/rekall\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Rekall Framework is a completely open collection of tools, implemented in Python under the Apache and GNU General Public License, for the extraction and analysis of digital artifacts computer systems.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/google/turbinia\"\u003egoogle/turbinia\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomation and Scaling of Digital Forensics Tools\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.graylog.org/\"\u003eGraylog\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eBuilt to open standards, Graylog’s connectivity and interoperability seamlessly collects, enhances, stores, and analyzes log data.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hunters-forge/api-to-event\"\u003ehunters-forge/API-To-Event\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA repo to document API functions mapped to security events across diverse platforms\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/hunters-forge/OSSEM\"\u003ehunters-forge/OSSEM\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOpen Source Security Events Metadata (OSSEM)\u003c/td\u003e\n    \u003c/tr\u003e\n   \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/jimtin/IRCoreForensicFramework\"\u003ejimtin/IRCoreForensicFramework\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePowershell 7 (Powershell Core)/ C# cross platform forensic framework. Built by incident responders for incident responders.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/JPCERTCC/LogonTracer\"\u003eJPCERTCC/LogonTracer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInvestigate malicious Windows logon by visualizing and analyzing Windows event log\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/JPCERTCC/SysmonSearch\"\u003eJPCERTCC/SysmonSearch\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInvestigate suspicious activity by visualizing Sysmon's event log\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/IllusiveNetworks-Labs/HistoricProcessTree\"\u003eIllusiveNetworks-Labs/HistoricProcessTree\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAn Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/intezer/linux-explorer\"\u003eintezer/linux-explorer\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEasy-to-use live forensics toolbox for Linux endpoints\u003c/td\u003e\n    \u003c/tr\u003e\n   \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Invoke-IR/ACE\"\u003eInvoke-IR/ACE\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Automated Collection and Enrichment (ACE) platform is a suite of tools for threat hunters to collect data from many endpoints in a network and automatically enrich the data. The data is collected by running scripts on each computer without installing any software on the target. ACE supports collecting from Windows, macOS, and Linux hosts.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Invoke-IR/PowerForensics\"\u003eInvoke-IR/PowerForensics\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePowerForensics provides an all in one platform for live disk forensic analysis\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ion-storm/sysmon-edr\"\u003eion-storm/sysmod-edr\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSysmon EDR Active Response\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/kacos2000/MFT_Browser\"\u003ekacos2000/MFT_Browser\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003e$MFT directory tree reconstruction \u0026 record info\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://securelist.com/happy-ir-in-the-new-year/83557/\"\u003eKaspersky IR's Artifacts Collector\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eKaspersky IR's Artifacts Collector\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.brimorlabsblog.com/2019/04/live-response-collection-cedarpelta.html\"\u003eLive Response Collection - Cedarpelta\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLive Response Collection - Cedarpelta \u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/log2timeline/plaso\"\u003elog2timeline/plaso\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003elog2timeline is a tool designed to extract timestamps from various files found on a typical computer system(s) and aggregate them.\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://www.magnetforensics.com/resources/magnet-app-simulator/\"\u003eMAGNET App Simulator\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eMAGNET App Simulator lets you load application data from Android devices in your case into a virtual environment, enabling you to view and interact with the data as the user would have seen it on their own device.\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/MalwareSoup/MitreAttack\"\u003eMalwareSoup/MitreAttack\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePython wrapper for the Mitre ATT\u0026CK framework API\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/markbaggett/srum-dump\"\u003emarkbaggett/srum-dump\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/markbaggett/werejugo\"\u003emarkbaggett/werejugo\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eIdentifies physical locations where a laptop has been based upon wireless profiles and wireless data recorded in event logs\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/microsoft/avml\"\u003emicrosoft/avml\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAVML - Acquire Volatile Memory for Linux\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/miriamxyra/EventList\"\u003emiriamxyra/EventList\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eEventList is a tool to help improving your Audit capabilities and to help to build your Security Operation Center.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mitre-attack/bzar\"\u003emitre-attack/bzar\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA set of Zeek scripts to detect ATT\u0026CK techniques.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/monnappa22/HollowFind\"\u003emonnappa22/HollowFind\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eHollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and als…\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mozilla/audit-go\"\u003emozilla/audit-go\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLinux Audit Plugin for heka written using netlink Protocol in golang and Lua\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mozilla/mig\"\u003emozilla/mig\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eDistributed \u0026 real time digital forensics at the speed of the cloud\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/mozilla/MozDef\"\u003emozilla/MozDef\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMozDef: The Mozilla Defense Platform\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nannib/Imm2Virtual\"\u003enannib/Imm2Virtual\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD(Raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Netflix/dispatch\"\u003eNetflix/dispatch\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAll of the ad-hoc things you're doing to manage incidents today, done for you, and much more!\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/nshalabi/SysmonTools\"\u003enshalabi/SysmonTools\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUtilities for Sysmon (Sysmon View and Sysmon Shell)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/NVISOsecurity/evtx-hunter\"\u003eNVISOsecurity/evtx-hunter\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eevtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://nxlog.co/\"\u003eNXLog\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe modern open source log collector.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/omenscan/achoir\"\u003eomenscan/achoir\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eWindows Live Artifacts Acquisition Script\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/omenscan/achoirx\"\u003eomenscan/achoirx\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eReWrite of AChoir in Go for Cross PlatformReWrite of AChoir in Go for Cross Platform\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/opencybersecurityalliance/kestrel-lang\"\u003eopencybersecurityalliance/kestrel-lang\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eKestrel Threat Hunting Language\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OpenEx-Platform/openex\"\u003eOpenEx-Platform/openex\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOpen Crisis Exercises Planning Platform\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/orlikoski/CyLR\"\u003eorlikoski/CyLR\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eCyLR - Live Response Collection Tool\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://ossec.github.io/\"\u003eOSSEC\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eOpen Source HIDS SECurity\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/OTRF/Azure-Sentinel2Go\"\u003eOTRF/Azure-Sentinel2Go\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAzure Sentinel2Go is an open source project developed to expedite the deployment of an Azure Sentinel lab.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ovotech/gitoops/\"\u003eovotech/gitoops\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eGitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/philhagen/sof-elk\"\u003ephilhagen/sof-elk\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eConfiguration files for the SOF-ELK VM, used in SANS FOR572\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/polylogyx/PolyMon\"\u003epolylogyx/PolyMon\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePolyLogyx Monitoring Agent (PolyMon) is a Windows software that leverages the osquery tool and the PolyLogyx Extension to osquery, to provide a view into detailed information about process creations, network connections, file system changes and many other activities on the system.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/ptresearch/AttackDetection\"\u003eptresearch/AttackDetection\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Attack Detection Team searches for new vulnerabilities and 0-days, reproduces it and creates PoC exploits to understand how these security flaws work and how related attacks can be detected on the network layer. Additionally, we are interested in malware and hackers’ TTPs, so we develop Suricata rules for detecting all sorts of such activities.\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/PUNCH-Cyber/stoq\"\u003ePUNCH-Cyber/stoq\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eAn open source framework for enterprise level automated analysis.\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/PwC-IR/Office-365-Extractor\"\u003ePwC-IR/Office-365-Extractor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThe Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/rajiv2790/FalconEye\"\u003erajiv2790/FalconEye\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eFalconEye: Real-time detection software for Windows process injections\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/refractionPOINT/limacharlie\"\u003erefractionPOINT/limacharlie\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLC is an Open Source, cross-platform (Windows, MacOS, Linux ++), realtime Endpoint Detection and Response sensor. The extra-light sensor, once installed on a system provides Flight Data Recorder type information (telemetry on all aspects of the system like processes, DNS, network IO, file IO etc).\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/RomanEmelyanov/CobaltStrikeForensic\"\u003eRomanEmelyanov/CobaltStrikeForensic\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eToolset for research malware and Cobalt Strike beacons\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://rocknsm.io/\"\u003eROCK NSM\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eResponse Operation Collection Kit - An open source Network Security Monitoring platform.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/salesforce/bro-sysmon/\"\u003esalesforce/bro-sysmon\u003c/td\u003e\n        \u003ctd\u003eBro-Sysmon enables Bro to receive Windows Event Logs. This provide a method to associate Network Monitoring and Host Monitoring. The work was spurred by the need to associate JA3 and HASSH fingerprints with the application on the host. The example below shows the hostname, Process ID, connection information, JA3 fingerprints, Application Path, and binary hashes.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/salesforce/jarm\"\u003esalesforce/jarm\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eJARM is an active Transport Layer Security (TLS) server fingerprinting tool.\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/sans-blue-team/DeepBlueCLI\"\u003esans-blue-team/DeepBlueCLI\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eDeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://securityonion.net/\"\u003eSecurity Onion\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ePeel back the layers of your enterprise\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SeAdvisors/dredd\"\u003eSecurityRiskAdvisors/dredd\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eAutomated detection rule analysis utility\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SecurityRiskAdvisors/TALR\"\u003eSecurityRiskAdvisors/TALR\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThreat Alert Logic Repository (TALR) - A public repository for the collection and sharing of detection rules in platform agnostic formats. Collected rules are appended with STIX required fields for simplified sharing over TAXII servers.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SekoiaLab/fastir_artifacts\"\u003eSekoiaLab/fastir_artifacts\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eLive forensic artifacts collector\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/SekoiaLab/Fastir_Collector\"\u003eSekoiaLab/Fastir_Collector\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eThis tool collects different artefacts on live Windows and records the results in csv or json files. With the analyses of these artefacts, an early compromission can be detected.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/shellster/DCSYNCMonitor\"\u003eshellster/DCSYNCMonitor\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eMonitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://siemonster.com/\"\u003eSIEMonster\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSIEMonster is an Affordable Security Monitoring Software Soulution\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://sigma.socprime.com/#!/\"\u003eSigma Rules Repository Mirror\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSigma rules repository mirror and translations\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/slackhq/go-audit\"\u003eslackhq/go-audit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003ego-audit is an alternative to the auditd daemon that ships with many distros\u003c/td\u003e\n    \u003c/tr\u003e\n\t\u003ctr\u003e\n\t\t\u003ctd\u003e\u003ca href=\"https://github.com/s0md3v/Orbit\"\u003es0md3v/Orbit\u003c/a\u003e\u003c/td\u003e\n\t\t\u003ctd\u003eBlockchain Transactions Investigation Tool\u003c/td\u003e\n\t\u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/splunk/melting-cobalt\"\u003esplunk/melting-cobalt\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/sumeshi/evtx2es\"\u003esumeshi/evtx2es\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA library for fast import of Windows Eventlogs into Elasticsearch.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/swisscom/Invoke-Forensics\"\u003eswisscom/Invoke-Forensics\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eInvoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/Sysinternals/SysmonForLinux\"\u003eSysinternals/SysmonForLinux\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eSysmon For Linux install and build instructions\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/tclahr/uac\"\u003etclahr/uac\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eUAC (Unix-like Artifacts Collector) is a Live Response collection tool for Incident Reponse that makes use of built-in tools to automate the collection of Unix-like systems artifacts. Supported systems: AIX, FreeBSD, Linux, macOS, NetBSD, Netscaler, OpenBSD and Solaris.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/telekom-security/acquire-aws-ec2\"\u003etelekom-security/acquire-aws-ec2\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eA python script to acquire multiple aws ec2 instances in a forensically sound-ish way\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.cgsecurity.org/wiki/TestDisk\"\u003eTestDisk\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eTestDisk is powerful free data recovery software! It was primarily designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software: certain types of viruses or human error (such as accidentally deleting a Partition Table). Partition table recovery using TestDisk is really easy.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://www.sleuthkit.org/\"\u003eThe Sleuth Kit\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003esleuthkit.org is the official website for The Sleuth Kit®, Autopsy®, and other open source digital investigation tools. From here, you can find documents, case studies, and download the latest versions of the software.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/thewhiteninja/ntfstool\"\u003ethewhiteninja/ntfstool\u003c/a\u003e\u003c/td\u003e\n        \u003ctd\u003eForensics tool for NTFS (parser, mft, bitlocker, deleted files)\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n        \u003ctd\u003e\u003ca href=\"https://github.com/THIBER-ORG/userline\"\u003eTHIBER-ORG/use","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpaulveillard%2Fcybersecurity-infosec","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpaulveillard%2Fcybersecurity-infosec","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpaulveillard%2Fcybersecurity-infosec/lists"}