The Phishing Intelligence Engine (PIE) is a framework that will assist with the detection and response to phishing attacks. An Active Defense framework built around Office 365, that continuously evaluates...
by do son · Published December 6, 2018 · Last modified November 4, 2024
Atomic Red Team is small, highly portable, community developed detection tests mapped to Mitre’s ATT&CK. ATT&CK was created by and is a trademark of The MITRE Corporation. Our Atomic Red Team tests...
Defense / Forensics / Malware Analysis
by do son · Published December 5, 2018 · Last modified October 10, 2021
PA Toolkit (Pentester Academy Wireshark Toolkit) PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol dissector to the...
Checkpot is a honeypot checker: a tool meant to detect mistakes in the configuration of honeypots. It is aimed at security researchers who wish to check that their honeypots are...
sshesame A fake SSH server that lets everyone in and logs their activity. Warning This software, just like any other, might contain bugs. Given the popular nature of SSH, you...
GoAccess GoAccess is an open-source real-time web log analyzer and interactive viewer that runs in a terminal on *nix systems or through your browser. It provides fast and valuable HTTP statistics for system administrators that require...
xxUSBSentinel Windows anti-forensics USB monitoring tool. First, you map a Key USB device – it can be a mouse, keyboard, flash drive etc. It will ask you to plug and...
Conpot Conpot is an ICS honeypot with the goal to collect intelligence about the motives and methods of adversaries targeting industrial control systems Install using Docker Via a pre-built image...
SNARE Super Next-generation Advanced Reactive honEypot It is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Getting started You need a Python3. We tested primarily...
CAINE (Computer Aided Investigative Environment) is a UNU-based GNU/Linux self-starting distribution that was created as a digital forensics project at the Interdisciplinary Center for Security Research (CRIS). The CAINE forensics...
process-forest is a tool that processes Microsoft Windows EVTX event logs that contain process accounting events and reconstructs the historical process hierarchies. That is, it displays the parent-child relationships among programs....
Kemon An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring. With the power of it, we can easily implement LPC communication monitoring, MAC policy filtering, kernel driver firewall,...
memtriage Allows you to quickly query a live Windows machine for RAM artifacts This tool utilizes the Winpmem drivers to access physical memory and Volatility for analysis. Caveats: Doesn’t work with Device Guard enabled....
btrForensics Forensic Analysis Tool for Btrfs File System. Btrfs is a modern copy on write (CoW) filesystem for Linux aimed at implementing advanced features while also focusing on fault tolerance,...
UserLine This tool automates the process of creating logon relations from MS Windows Security Events by showing a graphical relation among users domains, source, and destination logons as well as...
Support Securityonline.info site. Thanks!
