A collection of learning resources for curious software engineers

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Main Sigma Rule Repository

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Python PDF Parser (Not actively maintained). Check out pdfminer.six.

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

Collaborative forensic timeline analysis

Super timeline all the things

Rekall Memory Forensic Framework

Security auditing tool for AWS environments

Open Source Security Events Metadata (OSSEM)

Cyber Analytics Repository

CloudTracker helps you find over-privileged IAM users and roles by comparing CloudTrail logs with current IAM policies.

Pure Python parser for Windows Event Log files (.evtx)

Protocol Analysis/Decoder Framework

Pure Python parser for Windows Registry hives.

Kusto client libraries for Python

Carbon Black API - Python language bindings

Carbon Black Feeds

Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just another wrapper around 7zip!

Best Practices, queries, and packages for CQL the language of CrowdStrike's LogScale (Humio) log manager.