ANSSI

All

71 repositories

DFIR-O365RC
Public
PowerShell module for Office 365 and Azure log collection
devops forensics dfir azure-active-directory office365 exchangeonline powershell azure
PowerShell
•
GNU General Public License v3.0
•30•249•0•0•Updated Nov 15, 2024Nov 15, 2024
ADTimeline
Public
Timeline of Active Directory changes with replication metadata
windows splunk active-directory forensics dfir timeline powershell
PowerShell
•
GNU General Public License v3.0
•57•475•2•0•Updated Nov 15, 2024Nov 15, 2024
shovel
Public
Web interface to explore Suricata EVE outputs
suricata ctf network-monitor attack-defense-ctf ecsc ecsc2024 ecsc2023
JavaScript
•8•40•0•0•Updated Nov 15, 2024Nov 15, 2024
MLA
Public
Multi Layer Archive - A pure rust encrypted and compressed archive file format
Rust
•
GNU Lesser General Public License v3.0
•20•327•17•7•Updated Nov 12, 2024Nov 12, 2024
DFIR4vSphere
Public
Powershell module for VMWare vSphere forensics
vmware vmware-esxi forensics vmware-vsphere powershell dfir
PowerShell
•
GNU General Public License v3.0
•18•140•0•0•Updated Nov 8, 2024Nov 8, 2024
OSAKA
Public
Outil de sécurité des architectures kubernetes avancées
Python
•
GNU General Public License v3.0
•1•10•0•0•Updated Nov 7, 2024Nov 7, 2024
eurydice
Public
A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
Python
•
GNU Affero General Public License v3.0
•0•7•0•0•Updated Oct 24, 2024Oct 24, 2024
DECODE
Public
Malware detection tool for Windows PE files based on DFIR ORC data
windows machine-learning splunk forensics anomaly-detection malware-detection
Python
•
BSD 3-Clause "New" or "Revised" License
•0•4•0•0•Updated Oct 18, 2024Oct 18, 2024
hackropole-hugo
Public
A Hugo theme to host Capture-The-Flag (CTF) challenges as a static website like hackropole.fr.
HTML
•3•10•3•0•Updated Oct 17, 2024Oct 17, 2024
orc2timeline
Public
orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
Python
•
GNU Lesser General Public License v3.0
•0•27•0•0•Updated Oct 11, 2024Oct 11, 2024
lidi
Public
Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction
rust raptorq diode data-diode networking
Rust
•
GNU Lesser General Public License v3.0
•12•49•3•1•Updated Jul 29, 2024Jul 29, 2024
ORADAZ
Public
Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data
Rust
•
GNU General Public License v3.0
•1•13•0•0•Updated Jul 26, 2024Jul 26, 2024
IPECC
Public
A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration
asic fpga ecc vhdl elliptic-curve-cryptography
VHDL
•
Other
•8•27•1•0•Updated Jul 19, 2024Jul 19, 2024
guide-journalisation-microsoft
Public
Guide journalisation Microsoft
PowerShell
•6•57•0•0•Updated Jul 15, 2024Jul 15, 2024
rust-guide
Public
Recommendations for secure applications development with Rust
recommendations rust good-practices secure-coding
Shell
•
Other
•47•593•17•9•Updated Jul 10, 2024Jul 10, 2024
libdrbg
Public
A portable library implementing NIST SP 800-90A DRBGs
hmac-drbg sp800-90a drbg ctr-drbg hash-drbg c cryptography crypto
C
•
Other
•7•9•0•1•Updated Jul 8, 2024Jul 8, 2024
bits_parser
Public
Extract BITS jobs from QMGR queue and store them as CSV records
windows incident-response forensics
Python
•
MIT License
•6•74•2•2•Updated Jul 2, 2024Jul 2, 2024
ORADAD
Public
Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
C++
•
GNU General Public License v3.0
•29•220•4•0•Updated Jun 18, 2024Jun 18, 2024
pycrate
Public archive
A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.
1•5•0•0•Updated Mar 14, 2024Mar 14, 2024
AnoMark
Public
Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs
Python
•
GNU General Public License v3.0
•3•78•0•0•Updated Feb 21, 2024Feb 21, 2024
pciemem
Public
Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test
C
•3•10•0•0•Updated Jan 8, 2024Jan 8, 2024
bmc-tools
Public
RDP Bitmap Cache parser
Python
•
CeCILL Free Software License Agreement v2.1
•84•479•1•3•Updated Dec 1, 2023Dec 1, 2023
ProTIP
Public archive
ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express
Prolog
•
MIT License
•0•9•1•0•Updated Nov 9, 2023Nov 9, 2023
Faults_experiments
Public archive
Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI
Python
•
Other
•0•2•0•0•Updated Sep 18, 2023Sep 18, 2023
Faults_analyzer
Public archive
Logiciel d'analyse de campagnes de perturbations sur composants
Python
•
Other
•2•6•0•0•Updated Sep 18, 2023Sep 18, 2023
DroidWorks
Public
Rust
•
GNU General Public License v3.0
•0•5•0•0•Updated Jul 30, 2023Jul 30, 2023
cry-me
Public
CRY.ME (CRYptographic MEssaging application)
android challenge cryptography crypto ctf ctf-challenges
Kotlin
•
Other
•4•167•0•0•Updated Jun 20, 2023Jun 20, 2023
sftp2misp
Public
Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.
Python
•
GNU General Public License v3.0
•2•16•1•1•Updated May 12, 2023May 12, 2023
ctf
Public
Epreuves de sélection de la TeamFR pour l'ECSC 2019.
Python
•
GNU General Public License v3.0
•14•161•2•3•Updated May 1, 2023May 1, 2023
ASCAD
Public
Side Channels Analysis and Deep Learning
Python
•
Other
•60•184•9•1•Updated Mar 13, 2023Mar 13, 2023