Tools
chainsaw
WithSecureLabs/chainsaw
Chainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
Topics
Related projects
chainsaw3.7kChainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
LogonTracer3.3kLogonTracer is a self-hosted web application for investigating Windows Active Directory logon events, graphing accounts and hosts and optionally using OpenAI models for AI-assisted threat analysis.
scirius686Scirius is a web application for managing Suricata rulesets, composing rule sources, applying transformations and reviewing rule activity statistics for threat hunting.
sniffnet42.2kA cross-platform desktop app for comfortably monitoring network traffic, with real-time charts, connection inspection, geolocation, protocol identification, notifications and PCAP import/export.
wifiphisher15kWifiphisher is a rogue access point framework for red team engagements and Wi-Fi security testing. It performs Evil Twin, KARMA and known-beacon association attacks, then serves customizable phishing pages to capture credentials under controlled, authorized testing.
shadowsocks-rust11kA Rust port of Shadowsocks, providing fast tunnel proxy client and server binaries (plus libraries) to bypass firewalls.