DET (extensible) Data Exfiltration Toolkit is a proof of concept tool for performing Data Exfiltration using multiple channels simultaneously.
All security tools
2,963 results · page 31
DeTCT is a digital risk discovery and protection platform that monitors attack surfaces, vulnerabilities, data leaks, brand impersonation, and third-party risks to help organizations manage…
A tool for detecting and preventing secrets in code
A report on detecting lateral movement through tracking event logs, updated to include analysis of various tools and commands used by attackers.
A comprehensive resource for threat hunting in Active Directory environments, covering tracking command-line/PowerShell activity, Kerberoasting detection, auditing attacker activity, and mo…
A set of interrelated detection rules for improving detection and hunting visibility and context
A compilation of suggested tools for each component in a detection and response pipeline, with real-world examples, to design effective threat detection and response pipelines.
Repository for detection content with various types of rules and payloads.
A newsletter service that tracks and reports weekly changes in detection engineering rules and updates across multiple GitHub repositories.
A lab designed for defenders to quickly build a Windows domain pre-loaded with security tooling and best practices in system logging configurations.
Home for rules used by Elastic Security with code for unit testing, Kibana integration, and Red Team Automation.
An article in Phrack Magazine discussing the creation of shellcode for StrongARM/Linux architecture.
A remediation orchestration platform that consolidates security alerts, automates triage, and streamlines the remediation process across hybrid environments.
Tools for working with Android .dex and Java .class files, including dex-reader/writer, d2j-dex2jar, and smali/baksmali.
A Python tool for patching Dalvik bytecode in DEX files and assisting in Android application analysis
A cybersecurity challenge where you play the role of an incident response consultant investigating an intrusion at Precision Widgets of North Dakota.
DFIR ORC Documentation provides detailed instructions for setting up the build environment and deploying the tool.
Andrew Case's personal page for research, software projects, and speaking events
DFIRTrack is an open source web application focused on incident response for handling major incidents with many affected systems, tracking system status, tasks, and artifacts.
A framework for orchestrating forensic collection, processing, and data export.
A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.
DIANNA is an AI-powered cybersecurity companion from Deep Instinct that analyzes and explains unknown threats, offering malware analysis and translating code intent into natural language.
A DICOM server with a twist, blocking C-STORE attempts for protection but logging them.
A web-based tool for instrumenting and analyzing Android applications using Flask, Jinja, and Redis.
Load more tools
Showing 744 of 2,963