Discover ANSSI-FR/guide-journalisation-microsoft Open Source project

Timeline of Active Directory changes with replication metadata

429

ADTimeline

PowerShell

423

polichombr

Collaborative malware analysis framework

Multi Layer Archive - A pure rust encrypted and compressed archive file format

371

MLA

Machine Learning for Computer Security

308

SecuML

Library for elliptic curves cryptography

268

libecc

254

DFIR-O365RC

PowerShell module for Office 365 and Azure log collection

PowerShell

222

ORADAD

Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data

SmartPGP is a JavaCard implementation of the OpenPGP card specifications

191

SmartPGP

Java

178

ASCAD

Side Channels Analysis and Deep Learning

CRY.ME (CRYptographic MEssaging application)

167

cry-me

Kotlin

163

ctf

Epreuves de sélection de la TeamFR pour l'ECSC 2019.

User-friendly Lightweight TPM Remote Attestation over Bluetooth

154

ultrablue

Kotlin

154

AD-permissions

Active Directory permissions (ACL/ACE) auditing tools

PHP

146

DFIR4vSphere

Powershell module for VMWare vSphere forensics

tabi

bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

Active Directory Group Policy analyzer

SysvolExplorer

Full-bin indexation of binary files

Binacle

A RADIUS authentication server audit tool

audit-radius

Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs

AnoMark

Extract BITS jobs from QMGR queue and store them as CSV records

bits_parser

BGP Route Leaks Detection

route_leaks

Discover SPOF in DNS dependency graphs

transdep

SecAESSTM32

Bibliothèque C et assembleur permettant le chiffrement/déchiffrement AES-128 de messages pour des composants grand public (famille STM32F3/STM32F4)

x509-parser

a RTE-free X.509 parser

mabo

MRT Parser

OCaml

chipsec-check

Tools to generate a Debian Linux distribution with chipsec to test hardware requirements

Shell

picon

Picon

nogaxeh

Tools for analyzing hexagon code

Generic graph exploration, manipulation and visualization tool (Outil de Visualisation et Analyse de Liens Inter-objets)

OVALI

JavaScript

secAES-ATmega8515

Secure AES128 Encryption Implementation for ATmega8515

Assembly

Open-ISO7816-Stack

This project aims to provide an open-source implementation of the ISO7816-3 communication protocol from the reader side. This protocol is ruling the interactions between a smartcard and a card-reader when using its contacts to communicate

packetweaver

A Python framework for script filing and task sequencing

Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction

lidi

AD-control-paths LDAP submodule

ADCP-DirectoryCrawler

WAAD

Détection d'anomalie à partir des journaux d'authentification Windows

Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.

sftp2misp

CardStalker provides a UART-driven smartcard reader at the T=1 (see ISO7816-3) level (link and physical layer), where most of the smartcard reader devices on the market are only providing an APDU interface (application layer).

cardstalker

IPECC

A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration

VHDL

mdbook-checklist

mdbook preprocessor for generating checklists and indexes

Web interface to explore Suricata EVE outputs

shovel

Lua

xsvgen

XML Schema Validator Generator

OCaml

cornetto

Outil de gestion de version statique de site web

JavaScript

ORADAZ

Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data

ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express

ProTIP

Prolog

coq-prelude

General-purpose monad typeclass hierarchy for Coq

Coq

pciemem

Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test

scep

Security Contexts for Enhanced Protection Linux Security Module

Faults_analyzer

Logiciel d'analyse de campagnes de perturbations sur composants

A PDF parser and validator

caradoc

WSUS_Audit

Auditing scripts for WSUS infrastructures

DroidWorks

A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.

pycrate

ADCP-libdev

AD-control-paths libraries submodule

libapn

libapn is a header-based C++ library developed to study vectorial Boolean functions, including but not limited to APN functions.

Caml Crush: an OCaml PKCS#11 filtering proxy

caml-crush

libdrbg

A portable library implementing NIST SP 800-90A DRBGs

Faults_experiments

Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI

Toolset to analyse TLS datasets

concerto

opkcs11-tool

opkcs11-tool: managing and operating PKCS #11 security tokens in OCaml

eurydice

A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.

DECODE

Anomaly detection tool for PE files on Microsoft Windows system