PowerShell for every system!

SEED Labs developed in the last 20 years.

Binaries for the book Practical Malware Analysis

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

An advanced memory forensics framework

Windows Events Attack Samples

Mark Baggett's (@MarkBaggett - GSE #15, SANS SEC573 Author) tool for detecting randomness using NLP techniques rather than pure entropy calculations. Uses character pair frequency analysis to deter…

Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries

Tools, tips, tricks, and more for exploring ICS Security.

Repository of yara rules

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis