Category: Forensics

AzureAD user activity report

reportly: AzureAD user activity report tool

reportly Reportly is an AzureAD user activity report tool. This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious...

Deobfuscate Log4Shell payloads

Ox4Shell: Deobfuscate Log4Shell payloads

Ox4Shell Deobfuscate Log4Shell payloads with ease. Since the release of the Log4Shell vulnerability (CVE-2021-44228), many tools were created to obfuscate Log4Shell payloads, making the lives of security engineers a nightmare. This tool intends to...

command-line toolkit

dismember: scan the memory of all processes

Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes (or particular ones) for common secrets and custom regular expressions, among other things. It will...

Shodan Monitoring

shomon: Shodan Monitoring integration for TheHive

shomon ShoMon is a Shodan alert feeder for TheHive written in GoLang. With version 2.0, it is more powerful than ever! Functionalities Can be used as Webhook OR Stream listener Webhook listener opens a...