Tools
chainsaw
WithSecureOpenSource/chainsaw
Chainsaw is a fast, standalone CLI for Windows forensic triage. It searches event logs and MFT artefacts, applies Sigma and custom detection rules, and builds timelines for threat hunting and incident response.
Topics
Related projects
chainsaw3.7kChainsaw is a fast Rust command-line tool for threat hunting through Windows forensic artefacts, applying Sigma rules to event logs and analysing MFT and SRUM data.
LogonTracer3.3kLogonTracer is a self-hosted web application for investigating Windows Active Directory logon events, graphing accounts and hosts and optionally using OpenAI models for AI-assisted threat analysis.
scirius686Scirius is a web application for managing Suricata rulesets, composing rule sources, applying transformations and reviewing rule activity statistics for threat hunting.
sniffnet42.2kA cross-platform desktop app for comfortably monitoring network traffic, with real-time charts, connection inspection, geolocation, protocol identification, notifications and PCAP import/export.
wifiphisher15kWifiphisher is a rogue access point framework for red team engagements and Wi-Fi security testing. It performs Evil Twin, KARMA and known-beacon association attacks, then serves customizable phishing pages to capture credentials under controlled, authorized testing.
shadowsocks-rust11kA Rust port of Shadowsocks, providing fast tunnel proxy client and server binaries (plus libraries) to bypass firewalls.