sankyhack/Linux-Forensics-Tools-Capabilities

Stars
1
Language
Created 6 months ago
Updated 6 months ago

sankyhack/Linux-Forensics-Tools-Capabilities

sankyhack

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This repository contains simple CSV file which list the artifacts gather by Linux forensic tools

Threat-Hunting-with-WebProxy-Logs-using-Pandas---Jupyter-Notebook

Jupyter Notebook

ExtractLOLBin

Script is written to fetch LOLBin Details from Security and Sysmon EVTX file.

Vectra-AI

Scripts are written to fetch rules and certain detections from Vectra AI

Similar-looking-domain-detection-using-python-fuzzywuzzy

Major cause of phishing and BEC incident is similar looking domain, if you detect it early, you can prevent incidents early, python fuzzywuzzy module let you do that

Playing-with-Process-Data-of-10k-Malware-Sample

Purpose of this analysis is to understand the common behavior seen like locations from where malware runs, commonly used LOLBins, processes that communicate with internet and some hunting