mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Johnng007 / Live-Forensicator

Cross-platform incident response and live forensic artifact collector with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.

TonyPhipps / SIEM

SIEM Tactics, Techiques, and Procedures

Leo4j / Invoke-ADEnum

Active Directory Auditing and Enumeration