Run your GitHub Actions locally 🚀

An alternative to the immich-CLI command that doesn't depend on nodejs installation. It tries its best for importing google photos takeout archives.

Renaming photo and video files (retrieved from Google Photos) # by inserting the information extracted from the associated file (supplemental-metadata.json) into the file name # Date (Year, Month, …

Google Drive Public File Downloader when Curl/Wget Fails

OpenRelik ertools worker

A template repository for creating new OpenRelik worker modules

An index of publicly available and open-source threat detection rulesets.

A flexible threat detection platform that simplifies rule management and deployment using K8s CronJob and Helm, but can also run standalone or with other job schedulers like Nomad.

AvalynxDatatable is a simple, lightweight, and customizable datatable for the web. Based on Bootstrap >=5.3 without any framework dependencies.

TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes collaboration through shared queries (pivots) and centralized …

Script that organizes the Google Takeout archive into one big chronological folder

Connectlife API proxy / MQTT Home Assistant integration

machofile is a module to parse Mach-O binary files

Quickly find differences and similarities in disassembled code

Use YARA rules on Time Travel Debugging traces

Automatically archive links to videos, images, and social media content from Google Sheets (and more).

Code signing and transparency for containers and binaries

The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifa…

Re-play Security Events

Automating situational awareness for cloud penetration tests.

Documentation resources

Collection of Event ID ressources useful for Digital Forensics and Incident Response

Progressively image a mounted disk correctly without corruption

Incident Response Forensic Framework

This repo is meant to be a list of companies that hire security people full remote.

Search Templates for DFIR

The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)

Public script from SANS FOR509 Enterprise Cloud Incident Response