Pinned

1. Trawler Trawler Public

   PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.

   PowerShell 295 32

2. LogBoost LogBoost Public

   Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, Domain, ASN, DNS and Threat Indicator matches.

   Go 81

3. RetrievIR RetrievIR Public

   PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

   PowerShell 11 4

4. WMIHunter WMIHunter Public

   Asynchronous Remote Evidence Retrieval for rapid network-wide threat hunting

   PowerShell 7 2

5. MalCommands MalCommands Public

   Documenting Suspicious Command Lines

   HTML 4 1

6. crackdown crackdown Public

   Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.

   Go 13 1