Invictus Incident Response (@invictus-ir)
Guthub

invictus-ir

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    378
  • Global Org. Rank 28,278 (Top 9 %)
  • Followers 28
  • Registered over 3 years ago
  • Most used languages
    Python
         66.7 %
    PowerShell
         33.3 %

Top repositories

1

Microsoft-Extractor-Suite

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
PowerShell
291
star
2

Invictus-AWS

Python
166
star
3

ALFA

ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework
Python
140
star
4

Blue-team-app-Office-365-and-Azure

62
star
5

o365_dataset

A dataset containing Office 365 Unified Audit Logs for security research and detection
35
star
6

cobaltstrike

Collection of resources related to Cobalt Strike investigations
9
star
7

macOS

Repository for macOS related security research
7
star
8

aws_dataset

A dataset with CloudTrail events from an attack simulation using Stratus.
7
star
9

gws_dataset

Google Workspace Audit logs containing several attacks
5
star
10

talks

An overview of our talks at security conferences
4
star
11

Email-Forwarding-Rules

A mind map of email forwarding rule evidence in Microsoft 365
1
star
12

kql_queries

KQL queries for Incident Response
1
star
13

Sigma-AWS

This repository contains the research and components of our research into using Sigma for AWS Incident Response.
1
star