a collection of north korean apt articles, analysis and heists attributed to lazarus / bluenoroff / apt38.

Signature maker plugin for IDA 8.x

This repository contains my complete resources and coding practices for malware development using Rust 🦀.

A curated list of awesome forensic analysis tools and resources

A repository of curated datasets from various attacks

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

The Elastic stack (ELK) powered by Docker and Compose.

A collection of x64dbg scripts. Feel free to submit a pull request to add your script.

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

Malicious traffic detection system

오펜시브 시큐리티 TTP, 정보, 그리고 대응 방안을 분석하고 공유하는 프로젝트입니다. 정보보안 업계 종사자들과 학생들에게 도움이 되었으면 좋겠습니다.

An OSINT tool to search for accounts by username and email in social networks.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

The project aims to debloat Windows 10 and 11 and make it great again, by uninstalling bloat apps, disabling useless services, optimizing privacy and task scheduler. The name of the repository does…

Iconic font aggregator, collection, & patcher. 3,600+ icons, 50+ patched fonts: Hack, Source Code Pro, more. Glyph collections: Font Awesome, Material Design Icons, Octicons, & more

Introduces Republic of Korea's security documents recommended by CodeEngn.

Mapping XProtect's obfuscated malware family names to common industry names.

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

A Self-Contained Open-Source Cyberattack Experimentation Testbed

YARA signature and IOC database for my scanners and tools

Volatility 3.0 development

High Octane Triage Analysis

Linux kernel source tree

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

Configuration files for the SOF-ELK VM, used in SANS FOR572

Malware repository component for samples & static configuration with REST API interface.