DFIR & Cryptographer
SMUC. Simplified MITRE Use Cases, it describes the Attack and Detection
51CB-Boost. This repo contains scripts that utilizes Carbon Black EDR for boosting its IR and detection cababilities
8KillRat. Script to Kill Rat
6Emulate-And-Detect. This repositroy will contains attack emulation tests along with the detection rules for it
4Hybrid-Analysis-API. Powershell script to retrieve valuable data from Hybrid Analysis
2karemfaisal. Here I am !
1Anti-Ransomware. When Ransomware Run , it Search for Specific Extensions But of You Set you Data Without Extension And used "Open With " Option to open it , Most Ransomwae will ignore it and will not encrypt it , The program change The first 2 bytes too , so if Ransom detect the Extension from it , it will fail and not encrypt it
1Scan-IP. This PowerShell script aims to automate the process of scanning IPs in SOC (Security Operation Center)
1Fanno-Rayleigh-Lines. GasDynamics : Draw Fanno Line and Rayleigh Line When Shoke wave Happens for Chosen DownStream Pressure ,, Mechanical Engineering 3rd Year Alexandria University Project
1MacChanger--KAF. GUI PowerShell Script to Change Mac Address on Windows , it Has a DB For All OUI , It can regularly Change of MacAddress depending on a time you submit
1Disable-UAC-Need-Admin-privillige. Script to disable UAC If it bothers you ; not as a hacking tool because it need an Admin Privillige
1Spread-in-Removable-Medai. PowerShell Script to Spread in Removable Media Drivers
1Fake-CPU-Information. Fake CPU information Just if it's shown from computer Properties
1Rc4-Algorithm. Rc4 is a Stream Cipher used to Encrypt data
1