usbkill
usbkill is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py. Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian. Some reasons to use this tool: In case the police or other thugs come busting in (or steal your laptop from you when you are at a public library, as happened to Ross). The police commonly uses a 'mouse jiggler' to keep the screensaver and sleep mode from activating. You don’t want someone to add or copy documents to or from your computer via USB. You want to improve the security of your (encrypted) home or corporate server (e.g. Your Raspberry). [!] Important: Make sure to use disk encryption for all folders that contain information you want to be private. Otherwise they will get it anyway. Full disk encryption is the easiest and surest option if available. Tip: Additionally, you may use a cord to attach a USB key to your wrist. Then insert the key into your computer and start usbkill. If they steal your computer, the USB will be removed and the computer shuts down immediately.
FEATURES
ALTERNATIVES
A library to access and parse Windows XML Event Log (EVTX) format, useful for digital forensics and incident response.
Python script to parse macOS MRU plist files into human-friendly format
A command-line tool for extracting detailed information from JPEG files, including image dimensions, compression, and metadata.
Automated collection tool for incident response triage in Windows systems.
Python tool for remotely or locally dumping RAM of a Linux client for digital forensics analysis.
Stegextract is a Bash script that extracts hidden files and strings from images, supporting PNG, JPG, and GIF formats.
XMLStarlet offers a suite of command line utilities for manipulating and querying XML documents.
A Cross-Platform Forensic Framework for Google Chrome that allows investigation of history, downloads, bookmarks, cookies, and provides a full report.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.