Justin Ibarra

LoFP. Living off the False Positive!

OptionsBleed-POC-Scanner. OptionsBleed (CVE-2017-9798) PoC / Scanner

toruk. Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data

AlertLogic-event-api. Client side API for Alert Logic Threat Manager incidents and events

detection-rules. Rules for the Detection Engine in Elastic Security

identipy. IDENT protocol enumeration

IR-info. for school

security-docs. Home for Elastic Endpoint Security Documentation

kibana. Your window into the Elastic Stack

lfi_injector. Local File Inclusion

hackerbox-boms. List of contents contained in each HackerBox

awesome-detection-engineering. A list of useful Detection Engineering-related resources.

phonemenal. Python

volatility. An advanced memory forensics framework

eqllib. Python

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

cfaws. Contextual Forensics for AWS

integrations. Elastic Integrations

eql. Python

scirius. Scirius is a web application for Suricata ruleset management.

botsv1.

space_odyssey. Python

detection-rules-1. Threat Detection & Anomaly Detection rules for popular open-source components

pyesql. Pure python parser for Elasticsearch ES|QL queries