MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. The msticpy package was initially developed to support Jupyter Notebooks authoring for Azure Sentinel. Many of the included tools can be used in...
AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. How it works AutoTimeline automates this workflow: Identify the correct volatility profile for the memory image. Runs the timeliner plugin against volatile memory dump...
Linux Memory Grabber A script for dumping Linux memory and creating Volatility(TM) profiles. To analyze Linux memory, you first need to be able to capture Linux memory. AVML works great,...
Chain Reactor Chain Reactor is an open-source framework for composing executables that can simulate adversary behaviors and techniques on Linux endpoints. Executables can perform sequences of actions like process creation, network...
Incident Response Generator This application simulates an attack on AWS infrastructure. It was built for the Securosis/Cloud Security Alliance Advanced Cloud Security Practitioner training class. This code is designed to...
Pyauth Monitor your login attempts in Linux with pyauth What is Monitoring? Log monitors are a type of software that monitors log files. Servers, applications, networks, and security devices generate...
HFish It is a cross-platform honeypot platform developed based on golang, which has been meticulously built for enterprise security Multi-function： Not just support HTTP(S) Pot，It also supports SSH、SFTP、Redis、Mysql、FTP、Telnet、Deep etc. Expansibility： Provide API Interface，Users can...
RsWindowsThingies listen_mft Watch an entries’ values change. listen_events The event listen tool allows you to see Windows Event Logs in real-time. Note: It takes a minute for the event logs...
MemLabs is an educational, introductory set of CTF-styled challenges which is aimed to encourage students, security researchers and also CTF players to get started with the field of Memory Forensics. Warning:...
Crescendo Crescendo is a swift based, real-time event viewer for macOS. It utilizes Apple’s Endpoint Security Framework. Apple has introduced some new security mechanisms that we need to enable to...
glogg – the fast, smart log explorer glogg is a multi-platform GUI application that helps browse and search through long and complex log files. It is designed with programmers and...
TuxResponse Linux Incident Response TuxResponse is an incident response script for Linux systems written in bash. It can automate incident response activities on Linux systems and enable you to triage...
OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are...
Terrier Terrier is an Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to...
pytest-monitor Pytest-monitor is a pytest plugin designed for analyzing resource usage. Thanks to pytest-monitor, you can check resource consumption in particular through continuous integration, as this is done by monitoring the...
Support Securityonline.info site. Thanks!
