davehull/Kansa

A Powershell incident response framework

Language: PowerShell - Size: 1.09 MB - Last synced at: 8 days ago - Pushed at: over 2 years ago - Stars: 1,596 - Forks: 272

davehull/PSProfile

A new repo to contain my psprofile

Language: PowerShell - Size: 4.88 KB - Last synced at: 17 days ago - Pushed at: over 7 years ago - Stars: 3 - Forks: 2

davehull/Get-StakRank

A Powershell script for frequency analysis of separated values data files.

Language: PowerShell - Size: 312 KB - Last synced at: 17 days ago - Pushed at: over 11 years ago - Stars: 17 - Forks: 4

davehull/panther-analysis Fork of panther-labs/panther-analysis

Built-in Panther detection rules and policies

Language: Python - Size: 3.15 MB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

davehull/MCC

Tracking my work through the Matasano Crypto Challenges

Language: PowerShell - Size: 148 KB - Last synced at: 17 days ago - Pushed at: almost 6 years ago - Stars: 8 - Forks: 7

davehull/Demos Fork of clymb3r/Demos

Various demos

Language: PowerShell - Size: 109 KB - Last synced at: about 2 years ago - Pushed at: almost 11 years ago - Stars: 1 - Forks: 1

davehull/proxpy Fork of yeukhon/proxpy

Language: Python - Size: 145 KB - Last synced at: about 2 years ago - Pushed at: over 11 years ago - Stars: 0 - Forks: 0

davehull/PowerYaml Fork of scottmuc/PowerYaml

Powershell wrapper for Yaml.Net

Language: PowerShell - Size: 589 KB - Last synced at: about 2 years ago - Pushed at: almost 12 years ago - Stars: 1 - Forks: 0

davehull/pydbg Fork of OpenRCE/pydbg

A pure-python win32 debugger interface.

Language: Python - Size: 174 KB - Last synced at: about 2 years ago - Pushed at: about 13 years ago - Stars: 0 - Forks: 0

davehull/math-as-code Fork of Jam3/math-as-code

a cheat-sheet for mathematical notation in code form

Size: 298 KB - Last synced at: about 2 years ago - Pushed at: about 3 years ago - Stars: 0 - Forks: 0

davehull/quantstats Fork of ranaroussi/quantstats

Portfolio analytics for quants, written in Python

Size: 2.62 MB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/awesome-quant Fork of wilsonfreitas/awesome-quant

A curated list of insanely awesome libraries, packages and resources for Quants (Quantitative Finance)

Size: 378 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/handson-ml2 Fork of ageron/handson-ml2

A series of Jupyter notebooks that walk you through the fundamentals of Machine Learning and Deep Learning in Python using Scikit-Learn, Keras and TensorFlow 2.

Size: 147 MB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/mlfinlab Fork of hudson-and-thames/mlfinlab

MlFinLab helps portfolio managers and traders who want to leverage the power of machine learning by providing reproducible, interpretable, and easy to use tools.

Size: 629 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/machine-learning-asset-management Fork of firmai/machine-learning-asset-management

Machine Learning in Asset Management (by @firmai)

Size: 119 KB - Last synced at: about 2 years ago - Pushed at: over 3 years ago - Stars: 0 - Forks: 0

davehull/datascience Fork of r0f1/datascience

Curated list of Python resources for data science.

Size: 660 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/research_public Fork of quantopian/research_public

Quantitative research and educational materials

Size: 133 MB - Last synced at: about 2 years ago - Pushed at: over 4 years ago - Stars: 0 - Forks: 0

davehull/Get-Fields

Returns the field names from a separated values file, assuming the first line contains a header.

Size: 105 KB - Last synced at: about 2 months ago - Pushed at: over 11 years ago - Stars: 1 - Forks: 0

davehull/Get-WebFile

Powershell script based on Boe Prox's Get-WebPage.ps1, but this one pulls down a specific file

Size: 121 KB - Last synced at: about 2 months ago - Pushed at: over 11 years ago - Stars: 3 - Forks: 2

davehull/Add-Header

Utility script for adding a header to a data file

Language: PowerShell - Size: 121 KB - Last synced at: about 2 months ago - Pushed at: over 11 years ago - Stars: 1 - Forks: 1

davehull/Mal-Seine

Why hunt when you can seine?

Language: PowerShell - Size: 299 KB - Last synced at: 17 days ago - Pushed at: almost 10 years ago - Stars: 21 - Forks: 8

davehull/Loki Fork of Neo23x0/Loki

Loki - Simple IOC and Incident Response Scanner

Language: Python - Size: 36.9 MB - Last synced at: about 2 years ago - Pushed at: over 9 years ago - Stars: 1 - Forks: 1

davehull/PowerShellMethodAuditor Fork of zacbrown/PowerShellMethodAuditor

PowerShellMethodAuditor listens to the PowerShell ETW provider and logs PowerShell method invocations.

Language: C# - Size: 36.1 KB - Last synced at: about 2 years ago - Pushed at: over 8 years ago - Stars: 1 - Forks: 0

davehull/CimSweep Fork of mattifestation/CimSweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Language: PowerShell - Size: 255 KB - Last synced at: about 2 years ago - Pushed at: about 8 years ago - Stars: 2 - Forks: 1

davehull/PSReflect Fork of mattifestation/PSReflect

Easily define in-memory enums, structs, and Win32 functions in PowerShell

Language: PowerShell - Size: 28.3 KB - Last synced at: about 2 years ago - Pushed at: almost 8 years ago - Stars: 2 - Forks: 0

davehull/Empire Fork of EmpireProject/Empire

Empire is a PowerShell and Python post-exploitation agent.

Language: PowerShell - Size: 16.5 MB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 1 - Forks: 0

davehull/Update Fork of Power5hell/Update

Language: PowerShell - Size: 583 KB - Last synced at: about 2 years ago - Pushed at: almost 8 years ago - Stars: 1 - Forks: 0

davehull/PowerSploit Fork of PowerShellMafia/PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Language: PowerShell - Size: 10.2 MB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 3 - Forks: 1

davehull/PSReflect-Functions Fork of jaredcatkinson/PSReflect-Functions

Language: PowerShell - Size: 362 KB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 1 - Forks: 0

davehull/ACE Fork of Invoke-IR/ACE

Automated, Collection, and Enrichment Platform

Language: PowerShell - Size: 12.3 MB - Last synced at: about 2 years ago - Pushed at: about 7 years ago - Stars: 1 - Forks: 0

davehull/at-ps Fork of specterops/at-ps

Adversary Tactics - PowerShell Training

Size: 86.1 MB - Last synced at: about 2 years ago - Pushed at: over 5 years ago - Stars: 1 - Forks: 1

davehull/PowerShellArsenal Fork of mattifestation/PowerShellArsenal

A PowerShell Module Dedicated to Reverse Engineering

Language: PowerShell - Size: 1.63 MB - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 2 - Forks: 3

davehull/VirusTotalShell

A fork of David B Heise's VirusTotal Powershell Module

Language: PowerShell - Size: 8.79 KB - Last synced at: 17 days ago - Pushed at: about 3 years ago - Stars: 17 - Forks: 8

davehull/presentations

PDFs of slide decks I've presented

Size: 11.2 MB - Last synced at: about 2 months ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

davehull/SilkETW Fork of mandiant/SilkETW

Language: C# - Size: 214 KB - Last synced at: about 2 years ago - Pushed at: about 6 years ago - Stars: 0 - Forks: 1

davehull/autorunalyzer

A Python script for performing analysis of the output from Microsoft's Sysinternals Autoruns.

Language: Shell - Size: 88.9 KB - Last synced at: 17 days ago - Pushed at: about 13 years ago - Stars: 15 - Forks: 5

davehull/dnSpy Fork of dnSpy/dnSpy

.NET debugger and assembly editor

Language: C# - Size: 23.1 MB - Last synced at: about 2 years ago - Pushed at: about 7 years ago - Stars: 0 - Forks: 0

davehull/ThreatHunter-Playbook Fork of OTRF/ThreatHunter-Playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

Size: 14.4 MB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 0 - Forks: 1

davehull/krabsetw Fork of microsoft/krabsetw

KrabsETW provides a modern C++ wrapper around the low-level ETW trace consumption functions.

Language: C++ - Size: 1.89 MB - Last synced at: about 2 years ago - Pushed at: about 8 years ago - Stars: 1 - Forks: 0

davehull/sandbox-attacksurface-analysis-tools Fork of googleprojectzero/sandbox-attacksurface-analysis-tools

Language: C# - Size: 751 KB - Last synced at: about 2 years ago - Pushed at: about 8 years ago - Stars: 1 - Forks: 0

davehull/vivisect Fork of williballenthin/vivisect

please use https://github.com/fireeye/vivisect instead

Size: 10.2 MB - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 0 - Forks: 0

davehull/volatility Fork of volatilityfoundation/volatility

An advanced memory forensics framework

Language: Python - Size: 20.4 MB - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 1 - Forks: 0

davehull/Sharp-Suite Fork of FuzzySecurity/Sharp-Suite

My musings with C#

Size: 16.8 MB - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 0 - Forks: 0

davehull/PowerForensics Fork of Invoke-IR/PowerForensics

PowerShell - Live disk forensics platform

Language: C# - Size: 16.1 MB - Last synced at: about 2 years ago - Pushed at: over 6 years ago - Stars: 8 - Forks: 1

davehull/joystick Fork of mitre-attack/joystick

Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances in the results.

Size: 1.02 MB - Last synced at: about 2 years ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 0

davehull/body-ugid-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of u/gids per directory. This has been useful for finding malicious code that an attacker has placed on a Linux host while neglecting to change u/gids to match "normal" values for the given directory.

Language: Python - Size: 85.9 KB - Last synced at: about 2 months ago - Pushed at: over 13 years ago - Stars: 4 - Forks: 0

davehull/PeaceMaker Fork of D4stiny/PeaceMaker

PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.

Size: 411 KB - Last synced at: about 2 years ago - Pushed at: about 5 years ago - Stars: 0 - Forks: 1

davehull/memtriage Fork of gleeda/memtriage

Allows you to quickly query a Windows machine for RAM artifacts

Size: 16.3 MB - Last synced at: about 2 years ago - Pushed at: over 5 years ago - Stars: 0 - Forks: 0

davehull/metasploit-framework Fork of rapid7/metasploit-framework

Metasploit Framework

Language: Ruby - Size: 403 MB - Last synced at: about 2 years ago - Pushed at: over 5 years ago - Stars: 1 - Forks: 0

davehull/OSCPRepo Fork of rewardone/OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

Language: HTML - Size: 546 MB - Last synced at: about 2 years ago - Pushed at: over 6 years ago - Stars: 0 - Forks: 0

davehull/awesome-threat-intelligence Fork of hslatman/awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

Size: 10 MB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 0 - Forks: 2

davehull/ghidra Fork of NationalSecurityAgency/ghidra

Size: 17.6 KB - Last synced at: about 2 years ago - Pushed at: about 6 years ago - Stars: 0 - Forks: 1

davehull/pefile Fork of erocarrera/pefile

pefile is a Python module to read and work with PE (Portable Executable) files

Language: Python - Size: 702 MB - Last synced at: about 2 years ago - Pushed at: over 6 years ago - Stars: 1 - Forks: 0

davehull/ioc_writer Fork of mandiant/ioc_writer

Language: Python - Size: 328 KB - Last synced at: about 2 years ago - Pushed at: over 7 years ago - Stars: 0 - Forks: 0

davehull/EnumerationVisualized Fork of theonlykernel/enumeration

Size: 230 KB - Last synced at: about 2 years ago - Pushed at: almost 7 years ago - Stars: 0 - Forks: 0

davehull/lpeworkshop Fork of sagishahar-zz/lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

Size: 10.1 MB - Last synced at: about 2 years ago - Pushed at: about 7 years ago - Stars: 0 - Forks: 0

davehull/portsmash Fork of bbbrumley/portsmash

Language: C - Size: 78.1 KB - Last synced at: about 2 years ago - Pushed at: over 6 years ago - Stars: 0 - Forks: 0

davehull/analyzeMFT Fork of dkovar/analyzeMFT

Language: Python - Size: 155 KB - Last synced at: about 2 years ago - Pushed at: about 7 years ago - Stars: 0 - Forks: 1

davehull/Pester Fork of pester/Pester

Powershell BDD style testing framework

Language: PowerShell - Size: 9.82 MB - Last synced at: about 2 years ago - Pushed at: over 8 years ago - Stars: 1 - Forks: 1

davehull/pytan Fork of tanium/pytan

Python Wrapper for Tanium's SOAP API

Language: Python - Size: 89.8 MB - Last synced at: about 2 years ago - Pushed at: about 8 years ago - Stars: 0 - Forks: 1

davehull/body-outliers

A Python script for finding outliers in fls bodyfiles (see The Sleuth Kit) based on given metadata elements like metadata address, atime, ctime, crtime and mtime.

Language: Python - Size: 97.7 KB - Last synced at: about 2 months ago - Pushed at: over 13 years ago - Stars: 5 - Forks: 0

davehull/meta-outliers

A Python script that finds files with metadata addresses that are n standard deviations from the average metadata address of files on a per directory basis.

Language: Python - Size: 97.7 KB - Last synced at: about 2 months ago - Pushed at: over 13 years ago - Stars: 3 - Forks: 1

davehull/body-meta-dist

A Python script that parses the contents of an fls bodyfile (see The Sleuth Kit) and outputs the distribution of the metadata element passed as an argument.

Language: Python - Size: 93.8 KB - Last synced at: about 2 months ago - Pushed at: over 13 years ago - Stars: 4 - Forks: 1

davehull/Exif2GeoRSS

Takes GPS Exif metadata from image files (or whatever) and creates a GeoRSS file suitable for import into Bing Maps. See http://trustedsignal.blogspot.com/2012/02/plotting-photo-location-data-with-bing.html.

Language: Python - Size: 93.8 KB - Last synced at: about 2 months ago - Pushed at: about 13 years ago - Stars: 3 - Forks: 1

davehull/grr Fork of google/grr

Language: Python - Size: 111 MB - Last synced at: about 2 years ago - Pushed at: about 10 years ago - Stars: 0 - Forks: 1

davehull/rekall Fork of google/rekall

Rekall Memory Forensic Framework

Language: Python - Size: 56.3 MB - Last synced at: about 2 years ago - Pushed at: almost 11 years ago - Stars: 0 - Forks: 1

davehull/davehull.github.io

Size: 54.7 KB - Last synced at: about 2 months ago - Pushed at: over 11 years ago - Stars: 0 - Forks: 0