Blue Team Tools
34 items
📝Blue Jupyter📝CAPAAutomatically identifies capabilities in executable files.📝CutterCutter is a user-friendly GUI frontend for reverse engineering, analysing, decompiling, and debugging binaries.📝Dedier Stevens SuitePowerful collection of specialized security analysis tools created by Didier Stevens📝Detect It Easy (DIE)📝dnSpy📝ExifToolA command-line tool for reading, writing, and editing metadata in files📝EZ ToolsSet of tools for forensic analysis including registry analysis and timeline generation.📝FlossAutomatically extracts obfuscated strings from malware.📝FTK ImagerDigital forensics tool for image creation and data preview from various types of media.📝INetSimNetwork service emulation tool to create a controlled honeypot environment.📝JumpList ExplorerAnalyzes Windows JumpList files to reveal user activities.📝KAPEForensic data acquisition tool that quickly collects data and artifacts.📝MemProcFSThe memory process file system for accessing live memory as files.📝MISPOpen-source threat intelligence platform designed to improve the counter-measures used against cyber threats.📝MobSF📝PDFidLightweight utility for scanning PDF documents to identify suspicious elements📝PE-bear📝PEstudioTool used to inspect Windows executables to mitigate the risk of malicious files.📝PEviewQuick and easy way to view file structures and data of portable executables.📝Prefetch ParserAnalyzes Windows prefetch files to provide execution timelines.📝Process Explorer📝ProcmonAdvanced monitoring tool for Windows that shows real-time file system, registry, and process activity.📝Registry ExplorerTool to view the contents of Windows registry hives.📝SCdbg📝Shell Bags ExplorerHelps reconstruct the contents of Windows folder views.📝SNORTOpen-source network intrusion detection system to detect and prevent intrusions.📝Sysinternals SuiteComprehensive collection of advanced Windows utilities for system monitoring, diagnostics, and forensic analysis📝TCP DumpCommand-line packet analyzer to intercept and display network packets.📝TCP viewWindows program that shows detailed listings of all TCP and UDP endpoints.📝Virus TotalOnline malware scanning service that checks files, URLs, and domains.📝VolatilityAdvanced memory forensics framework.📝WiresharkNetwork protocol analyzer used for network troubleshooting and analysis.📝x32dbg & x64dbgDebuggers for Windows executables, used step through code, set breakpoints, and inspect program behavior.
No matches in this folder.