Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
-
Updated
Jun 10, 2026 - PowerShell
#
cloud-forensics
Here are 19 public repositories matching this topic...
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
azure incident-response dfir cybersecurity threat-hunting digital-forensics threathunting cloud-forensics azure-forensics azuresearcher azforensics unifiedauditlog powershellv5
-
Updated
Oct 29, 2022 - PowerShell
Simulates a compromise in a cloud and container environment
kubernetes aws security cloud-security cloud-forensics kubernetes-security cloudforensics docker-forensics kubernetes-forensics aws-forensics azure-forensics container-forensics
-
Updated
Dec 18, 2024 - Shell
AWS EKS Cluster Forensics
aws security incident-response dfir amazon-web-services eks eksctl eks-roles cloud-forensics eks-security eks-fargate aws-forensics eks-forensics cloud-incident-response
-
Updated
Aug 16, 2021
Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
hack incident-response forensics bec m365 cloud-forensics business-email-compromise azure-forensics cloud-incident-response
-
Updated
Dec 29, 2024 - PowerShell
Browser-based AWS CloudTrail log analyzer for incident response, security audits, and cloud forensics. No server. No dependencies. Fully client-side.
open-source aws log-analysis json-viewer incident-response dfir cybersecurity infosec aws-cloudtrail cloudtrail security-tools cloud-security blue-team cloud-forensics
-
Updated
Mar 3, 2026 - HTML
A comprehensive Digital Forensics course covering fundamentals, investigation processes, cybercrime, forensic tools, and practical investigations.
malware-analysis digital-forensics anti-forensics cloud-forensics email-forensics digital-evidence windows-forensics cyber-investigation digital-evidence-extraction-windows cloud-forrensics ai-ml-forensics
-
Updated
Aug 30, 2026
Scope is an open source cloud forensic tool to rapidly analyse logs, detect suspicious activity and identify malicious resources. Scope supports Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure.
-
Updated
Mar 26, 2025 - Python
Open-source AWS & Azure cloud forensics & threat detection platform. Features MITRE ATT&CK attack chain correlation, live dashboard, automated PDF reports, and zero infrastructure cost.
cli forensics dfir threat-hunting aws-security cloud-security azure-security mitre-attack cloud-forensics
-
Updated
Jul 29, 2026 - Python
Scope is an open source cloud forensic tool to conduct rapid incident response in Amazon Web Services (AWS).
-
Updated
Apr 30, 2025 - Python
This repository contains cybersecurity CTF and lab writeups covering investigations and defensive analysis from platforms such as CyberDefenders, HackTheBox, and more.
network-forensics cybersecurity digital-forensics memory-analysis network-analysis mitre security-tools cyber-threat-intelligence open-source-intelligence cloud-forensics endpoint-forensics
-
Updated
Jul 7, 2026
Hands-on AWS security lab investigating a simulated cloud breach through CloudTrail log analysis. Traces complete attack chain from compromised IAM credentials through privilege escalation to S3 data exfiltration. Demonstrates forensic analysis, IAM security, and incident response techniques.
aws incident-response aws-cli cloud-computing threat-hunting cloudtrail aws-security security-analysis cloud-security blue-team s3-security cloud-forensics iam-security pwnedlabs
-
Updated
Mar 9, 2026
A structured digital forensics project based on ISACA training – includes notes, demos, workflows, and visual playbooks for practical analysis.
-
Updated
Aug 8, 2025
Cloud forensics & IR toolkit — collect/parse/normalize AWS, Azure, GCP & Kubernetes logs to ECS v8
-
Updated
Sep 1, 2026 - Python
Apache Cloudstack
-
Updated
Jun 16, 2020 - Java
Digital Forensics & Legal -Tech
-
Updated
Apr 6, 2026
Field guide for threat hunting in AWS: workbooks, queries, and frameworks tailored for CloudTrail, GuardDuty, Detective, and real-world SOC investigations.
aws cloud cybersecurity threat-hunting soc aws-cloudtrail aws-guardduty security-operations cloud-forensics cloud-threat-hunting
-
Updated
Oct 31, 2025
These are my writeups for cybersecurity platforms that will go in-depth on how I solved a challenge.
-
Updated
Dec 1, 2025
Add this topic to your repo
To associate your repository with the cloud-forensics topic, visit your repo's landing page and select "manage topics."