Notes on responding to security breaches relating to Azure AD

Repository of attack and defensive information for Business Email Compromise investigations

MemProcFS

Elastic Security detection content for Endpoint

A C# project that builds a Web Applciation which redirects all HTTPS

Android Logs Events And Protobuf Parser

AVML - Acquire Volatile Memory for Linux

vhost password decrypt

Collection of malware source code for a variety of platforms in an array of different programming languages.

A collection of best resources to learn System Design, Software architecture, and prepare for System Design Interviews

A repository for additional files related to the book Windows Security Internals with PowerShell from No Starch Press.

IDA plugin which queries language models to speed up reverse-engineering

A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding quickly to security incidents.

Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

Automated Android custom unpacker generator

Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.

awesome-linux-rootkits

VirtualGHOST Detection Tool

DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based on research that has been performed by mounting different sce…

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks

This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.