Cyber Research Wiki

700 Integrations

Aaronlocker

Abuse Ch

Abuseipdb

Ac Hunter

Access Certifications

Access Context Manager

Access Control

Access For Infrastructure

Access Governance

Access Levels

Access Metrics

Access Reviews

Acls

Actionlint

Activity Log

Adaptive Shield

Adb

Admincount

Aff

Afl

Agent

Ai

Aide

Aircrack Ng And Related Tools

Aircrack-ng Suite

A collection of command-line tools for monitoring, testing, and auditing Wi‑Fi networks, including packet capture, frame injection, and offline key recovery for WEP and WPA/WPA2‑PSK.

Aireplay Ng

Akamai Guardicore Segmentation

Akto

Alb

Aleapp

Alienvault Otx

Allows Message Modification And Replay

Allstar

Altair Graphql Client

OWASP Amass

OWASP Amass is a framework for mapping internet-exposed assets and attack surfaces using OSINT and optional active reconnaissance, correlating results into a unified asset graph for analysis and tracking.

Amazon Athena

Amazon Detective

Amazon Eventbridge

Amazon Guardduty

Amazon Macie

Amazon Security Lake

Amcacheparser

Amsi

Analyzemft

Analyzing

And 802 1q Attacks With Both Gui And Cli Modes

And Abuseipdb

And Access Policies

And Adaptive Access Policies

And Air Gapped Recovery

And Aircrack Ng

And Allowed Requests

And Analyzing Embedded File Systems And Compressed Data In Firmware Images

And Analyzing Embedded Firmware Images

And Anomaly Detection For Industrial Environments

And API Activity

And API Analytics

And API Discovery

And Application Access Management

And Appsync Endpoints

And Appsync

And Aql Query Engine

And Ascii Modes Used For Building Custom Modbus Clients

And Attaching Attestations Using Sigstore Keyless Signing Or Traditional Key Based Signing

And Attack Generation With Support For Schema Brute Forcing

And Attesting Container Images With Key Based Or Keyless Workflows

And Audit Logs

And Authentication

And Automated Extraction Of Embedded Files

And Automated Provisioning

And Automated Recovery Orchestration

And Automating Scope Reviews

And Azure Ad Integration

And Bacnet Protocol Analyzers For Baseline Building

And Bacnet

And Banner Information For Ip Enrichment

And Beacon Detection Queries

And Biometrics For Ot Access Verification

And Breakpoint Capabilities

And Campaign Analysis

And Campaign Linkages

And Canary Tokens

And Canvas For Security Dashboards

And Case Management

And Certificate Detail Retrieval

And Certificate Transparency Log Analysis

And Certificate Validation

And Characteristic Read

And Ci

And Cloud Configurations

And Cloud Infrastructure Assessment

And Cloud Modules

And Cloud Storage

And Code Analysis

And Collaborative War Room

And Command Execution Across Windows Networks

And Command Injection

And Community Comments

And Comparing Module Guids

And Comparing Responses Across Authentication Contexts

And Compiler Information

And Compliance Checks

And Compliance Monitoring

And Compliance Reporting

And Compliance Scoring

And Connection Logs For Lateral Movement Analysis

And Connector Configuration

And Content Analysis

And Content Search

And Continuous Threat Detection Platform

And Converting Between Capture File Formats

And Counted Requests

And Coverage Over Time

And Credential Capture

And Credential Sniffing With A Modular Architecture

And Credential Sniffing

And Credentials From Pcap Files

And Custom Rule Sources

And Custom Workflows

And Dashboard

And Data Access Opportunities

And Data Exfiltration

And Data Source Integration

And Debugger Supporting C And Vb Net Decompilation

And Dependency Review In Github

And Deploys Rulesets With Policy Based Filtering

And Detailed Analytics

And Detecting Suspicious Keywords And Iocs

And Device Compromise

And Device Registration

And Distributing Iocs

And Distribution Info

And Distribution

And Dlp Policy Enforcement

And DNS Databases

And DNS Tokens

And Dockerfile

And Documenting Apis With Built In Scripting And Collection Management

And Dom Content When Triggered

And Domain Analysis With 70 Av Engines

And Driver Analysis Plugins For Kernel Rootkit Detection

And Drivers

And Dynamic Credential Generation

And Dynamic Vlan Assignment

And Elastic

And Elements Tabs For Tracing Dom Based Xss Data Flows And Testing Payloads In Real Time

And Embedded Data Within Firmware Images

And Encryption Info

And Encryption Settings

And Endpoint Verification

And Entitlement Management

And Ethernet

And Evaluating Exercises

And Evil Twin Deployment

And Exception Responses

And Export Capabilities

And Exporting Specific Fields For Analysis

And Extracting Audit Data

And Extracting San Lists From Certificates Retrieved Through Ct Monitoring

And File Activity Logging

And File Change Telemetry Ingested Into Splunk

And File Read

And File Telemetry

And Fileless Malware Artifacts

And Flood Tools

And Formatting Iocs

And Frida Discover

And Function Url Authorization Types

And GCP

And Generating Adoption Reports

And Generating Compliance Evidence

And Generation Of Resources Based On Security Policies

And Geographic Attributes

And Geographic Locations

And Go Lambda Runtimes

And Google Dork Queries

And Hidden Processes

And Hipaa Compliance

And Hipaa Controls

And Historian Used For Testing Detection Rules Against Realistic Scada Traffic

And Historical Scanning

And Hollowing

And Iac

And Iam Bindings

And Identity Based Access Control

And Identity Based Access

And Identity Checks

And Iiot

And Il Views Of Assembly Code

And Immutable Backup Support

And Incident Investigation

And Incident Review

And Industrial Protocol Support

And Injected Modules

And Insecure Configurations

And Instant Mass Restore

And Integration With Analysis Pipelines

And Integration With Devops Pipelines

And Intrusion Detection System For Passive Monitoring

And Intrusion Detection

And Investigation Workbench

And Ioc Extraction

And It Shop For Access Requests

And Ja3

And Jtag Protocols For Interfacing With Embedded Device Debug Interfaces

And Jwks Spoofing

And Kerberos Tickets From Windows Memory

And Kernel Structure Inspection For Rootkit Detection

And Kid Injection

And Kubernetes Resources With Sbom Generation

And Kubernetes Resources

And Lambda Authorizers

And Lifecycle Policies

And Lighthouse Multi Tenant

And Linker Detection Tool That Identifies Protection On Pe

And Linkers Used To Build Pe Files

And Local Outlier Factor For Anomaly Detection

And Long Connections In Zeek Logs

And Mach O Files

And Macos Memory Analysis With Plugin Architecture

And Macos

And Manage Device Compliance States

And Managing Vpc Firewall Rules In GCP

And Managing Zeek Instances Across Single Or Clustered Deployments

And Manipulating Application Behavior At Runtime

And Manual Testing Tools Including Repeater

And Many Other Protectors

And Mask Attacks

And Mdm Platforms

And Memory Dumps

And Metadata For Internet Connected Devices

And Misconfigured Services

And Missing Encryption

And MITRE Att Ck Mapping

And Ml Based Anomaly Detection

And Mobile Evidence Analysis

And Modified Kernel Modules

And Modules

And Monitoring Rule Performance

And Monitoring Sign In Analytics

And More

And Mssql Enumeration And Exploitation

And Mssql With Built In Modules For Password Spraying And Enumeration

And Multiple Output Formats

And Nano Form Factors

And Network Activity

And Network Connections

And Network Flows

And Network Monitoring

And Network Protection

And Network Requests For Phishing Detection

And Network Requests For Phishing Url Triage

And Network Requests

And Network Topology

And Networking

And Nist

And Oauth Grant Management

And Object Retrieval

And One Click Host Containment

And Open Ports From Public Sources

And Organizational Units

And Other Architectures

And Other Embedded Architecture Support For Firmware Binary Analysis

And Other Linux Architectures

And Other Protocols

And Other Services For Isolated Malware Analysis Networks

And Other Similarity Metrics

And Other Threat Indicators

And Other Tools For Low Level Smb Protocol Interaction

And Otp Available In Usb A

And Output Rails To Llm Applications Using Colang Flow Definitions And YAML Configuration

And Packet Rate

And Patching Integration

And Payload Delivery Used Throughout Web Application Testing

And Payload Delivery

And Persistence Testing

And Pickle Deserialization

And Plugin Based Traffic Manipulation

And Pmkid Formats

And Policies From Windows

And Policy Enforcement

And Policy Generation

And Post Exploitation Capabilities

And Post Exploitation Modules For Comprehensive Smb Testing

And Post Exploitation Tools For Validated Vulnerability Exploitation

And Prioritization

And Private Network Routing

And Privileged Access Workflows

And Process Activity For Observing Fileless Attack Behavior

And Process Operations

And Project Urls

And Protection Scope Evaluation For Integrating Purview Dlp With Custom Applications And Siem Platforms

And Protocol Decoding

And Query Limits

And Ransomware Extension Detection

And Rate Limit Evasion Techniques

And Raw Formats With Built In Hash Verification

And Re Signing JWT Tokens With Various Attack Modes

And Re Signing Jwts With Algorithm Manipulation Capabilities

And Reading Enclave Console Output

And Recording For Ot Remote Access

And Redacting Sensitive Data

And Register Data In Captured Packets

And Registry Entries

And Regulatory Compliance Capabilities

And Reloading Configuration

And Remote Execution Psexec

And Repacking Firmware Images For Security Testing

And Replaying API Requests With Extensions Like Autorize For Automated Authorization Testing

And Replaying Requests With Sql Injection Payloads Across All Parameter Types

And Report

And Reporting

And Resource Directories

And Resource Inspection In A Single Interface

And Resource Policies

And Response Bodies

And Response Platform

And Restructuring Pdfs For Easier Analysis

And Reviewing Activity Explorer Data And Dlp Alerts

And Risk Based Access Controls For Azure Ad Applications

And Risk Based Alerting

And Risk

And Risky User Behavior

And Role Bindings

And Rpki Status Changes

And Rule Deployment

And Runtime Process Monitoring

And Runtime Telemetry

And Runtime Versions

And Scripted Analysis Pipelines

And Scripting Capabilities

And Scripting Support For Multiple Architectures

And Secret Caching For Applications

And Secure Boot Configuration Auditing

And Security Anomalies

And Security Feature Support

And Security Signals

And Sending Broadcasts

And Sensitive Information Types

And Sequencer

And Service Creation Across The Enterprise

And Sharing

And Shimmer Analysis Of Speech Samples

And Simulating Master Slave Communication In Test Environments

And Sniffing Modbus Frames Enables Field Level Access To Mbap Headers

And Social Media Analysis

And Social Media Reconnaissance

And Social Media

And Spectrogram Generation

And Sspm

And Stakeholder Distribution Controls

And Stakeholder Reporting Dashboards

And Stepping Through Linux Binary Execution

And Structural Patterns

And Suspicious Command Patterns

And Suspicious Indicators

And System Binary Modifications

And Tampering With JWT Tokens To Test Authentication Bypasses

And Team Collaboration

And Technical Intelligence For Adversary Profiling

And Third Party Edr

And Third Party Tools Into A Unified Dashboard

And Threat Explorer For Investigation

And Threat Hunting Capabilities

And Threat Hunting

And Threat Intelligence

And Threat Protection Across Azure

And TLS Connections

And Token Exchanges

And Transcription Logging

And Transforming Data Useful For Deobfuscating Encoded Iocs

And Trend Analysis

And Triage Workflow Management

And Trustsec Integration

And Ttls

And Ttps

And Uefi Analysis

And Uefi Configuration

And Url Indicators For Matching Against Security Logs

And Validating Cyclonedx Sboms Programmatically

And Validating Firewall Effectiveness

And Validating Stix 2 0

And Values For Real Time Alerting

And Verify Authentication Response Functions

And Verifying Entries In The Rekor Transparency Log

And Viewing Registered Accounts

And Virtual Host Enumeration

And Vpn Capabilities With Modbus

And Vulnerability Assessment

And Vulnerability Data For Ip Addresses

And Vulnerability Detection Via The Nmap Scripting Engine

And Vulnerability Management Designed For Critical Infrastructure

And Vulnerability Searches

And Winrm Traffic Analysis

And Wmi Monitoring

And Workload Protection

And Yara Rules From Text

And Zone Transfer Queries

Androguard

Android Backup Extractor

Android Lint

Android Studio Profiler

Anomali Threatstream

Anomaly Detection

Ansible Lockdown

Anti Ransomware Detection

Any Run API

Any Run

API Fuzzer

API Gateway

API Monitor

Apigee

Apktool

Appcompatcacheparser

Applocker

Archer

Arjun

Arkime

Arm

Arp Scan

Arp

Arpspoof

Arpwatch

Artifact Hash

Asr Rules

Assessing Third Party Risk

Asset Identity Framework

Ast Analysis

Athena

Atomic Red Team Atomics

Atomic Red Team

Att Ck Navigator

Att Ck Workbench

Attackiq

Attestation

Attivo Networks

Audit Log

Auditd

Ausearch

Author

Authorization Codes

Authorize

Auto Classification

Auto Labeling Rules

Autobahn Testsuite

Automation

Automox

Autopsy

Autorepeater

Autorize

Autoruns

Aveva Historian

Avml

Awesome Waf

AWS Access Analyzer

AWS API Gateway

AWS Athena

AWS Audit Manager

AWS Backup

AWS Cli

AWS Cloudtrail

AWS Config

AWS Cost Anomaly Detection

AWS Detective

AWS Ecr

AWS Firewall Manager

AWS Guardduty

AWS Iam Access Analyzer

AWS Iam Identity Center

AWS Keys

AWS Kms

AWS Lambda Power Tuning

AWS Lambda

AWS Managed Rules

AWS Nitro Enclaves Sdk C

AWS S3 Object Lock

AWS Secrets Manager

AWS Security Hub Cspm

AWS Security Hub

AWS Systems Manager

AWS Verified Access

AWS Waf

AWS X Ray

AWS

Azure Activity Logs

Azure Ad Conditional Access

Azure Ad External Identities

Azure API Management

Azure Arc

Azure Backup

Azure Cli

Azure Conditional Access

Azure Data Explorer

Azure Immutable Blob

Azure Information Protection

Azure Logic Apps

Azure Monitor

Azure Policy

Azure Resource Graph

Azure Waf

Azure

Azureadrecon

Baddns

Bandit

Banners

Barnyard2

Bas

Base

Batch Processing

Batchql

Beacon Detection

Bettercap 2 X

Bettercap

An extensible, cross‑platform network attack and reconnaissance framework for 802.11 Wi‑Fi, Ethernet/IPv4/IPv6, BLE, HID, and CAN‑bus, featuring MITM components, sniffing, spoofing, and scriptable automation via caplets.

Beyondcorp Enterprise Connectors

Beyondcorp

Beyondtrust Privileged Remote Access

Bfg Repo Cleaner

Bgpalerter

Binary Ninja

Bindings

Binwalk

Bitlocker Recovery Password Viewer

Bitlocker

Bleak

Blkls

Block Counts

Blockchain Com API

Blockchain

Blockdev

Blocked

Blockstream Info

Bloodhound Ce

BloodHound (Community Edition)

BloodHound is an open‑source tool from SpecterOps that applies graph theory to identity and access relationships to uncover attack paths (privilege escalation and lateral movement) across Microsoft Active Directory, Azure AD, and other platforms via an extension model.

Bootkits Analyzer

Borgbackup

Boss Of The Soc

Boto3 Cloudtrail Client

Breach Data

Bridgecrew

Broadcast

Broken Link Checker

Browser Developer Tools

Browser Devtools

Browsinghistoryview

Brute Force

Btlejuice

Bulk Extractor

Burp Collaborator

Burp Java Deserialization Scanner

Burp JWT Editor

Burp Sequencer

Burp Suite Community

Burp Suite JWT Editor

Burp Suite Professional

Burp Suite Repeater

Burp Suite Turbo Intruder

Burp Suite

An intercepting proxy–based toolkit and dynamic scanner for discovering and analyzing web application and API security issues across desktop and enterprise (DAST) editions.

Burp Turbo Intruder

Bus Pirate

Bypassing Security Controls

Cabby

Cache Snooping

Cado Response

Caldera

Calico

Callback

Can I Take Over Xyz

Canarytoken

Canarytokens Org And Thinkst Canary Platforms

Canarytokens Org

Canarytokens

Capa

Cape Sandbox

Cape

Capinfos

Captive Portal

Carbon Black App Control

Cartography

Casb

Cdn Specific Tools

Cdp

Cedar Policy Language

Cellebrite Physical Analyzer

Cellebrite Ufed

Cerby

Certipy

Certspotter

Cff Explorer

Chainalysis Reactor

Chainsaw

Charles Proxy

Checkov

Chipsec

Chkrootkit

Chrome Devtools

Chrome Enterprise Premium

Chrome Enterprise

Chromecacheview

Chronicle Soar

Ci

Cimsession

Circl Pdns

Cis Cat Pro Assessor

Cis Docker Benchmark V1 8 0 To Minimize Attack Surface

Cisa Ics Cert

Cisa Kev Catalog

Cisa Stopransomware Guide

Cisa Tabletop Exercise Packages

Cisco Catalyst

Cisco Industrial Ethernet Switches

Cisco Isa 3000

Cisco Ise

Cisco Umbrella

Claim Manipulation

Clairvoyance

Clamav

Claroty Ctd

Claroty Secure Remote Access

Claroty Xdome

Claroty

Class Dump

Classifying

Claude

Clickjack Tester

Cloud Asset Inventory

Cloud Audit Logs

Cloud Logging

Cloud

Cloudflare Access

Cloudflare Device Posture

Cloudflare Diagnostics

Cloudflare Gateway

Cloudflare Logpush

Cloudflare Tunnel

Cloudflare

Cloudformation Stacksets

Cloudformation

Cloudfox

Cloudfront

Cloudtrail Lake

Cloudtrail

Cloudwatch Logs Insights

Cloudwatch Metrics

Cloudwatch

Cni Plu

Cobalt Strike

Cobaltstrikeparser

Code42 Incydr

Codeql To Perform Automated Static Analysis And Vulnerability Detection Across Repositories At Enterprise Scale

Codeql

Cohesity Dataprotect

Colang 2 0

Collection Enumeration

Commix

Community Maintained Database Of 130 Documented Adversary Groups With Referenced Campaign Reports

Commvault

Compiler

Compilers

Component

Compression Formats

Compromised Credentials

Compute

Conditional Access Policies

Conducting

Config Aggregator

Config Conformance Packs

Config

Confluence

Conftest

Connection

Consent Permissions

Constrainttemplates

Consul Template

Container Diff

Containerlab

Containers

Containment

Content Filtering

Content Type Converter

Cookies

Correlation Searches

Correlation

Cors Scanner

Corscanner

Cortex Data Lake

Cortex Xsoar

Cosign

Covenant C2

Cowpatty

Cowrie

Crackle

CrackMapExec (CME)

Open-source post-exploitation and lateral movement framework for automating credential validation, enumeration, and command execution across Windows/Active Directory networks over protocols like SMB, WinRM/WMI, MSSQL, and LDAP.

Createfunction And Data Events

Creation Timestamps

Credential Dumping

Credential Harvesting

Credential Testing

Credential Vaulting

Cross Platform Backup Tool With Built In Encryption And Deduplication

Crowdstrike Falcon API

Crowdstrike Falcon Console

Crowdstrike Falcon Device Control

Crowdstrike Falcon Identity Protection

Crowdstrike Falcon Intelligence

Crowdstrike Falcon Zta

Crowdstrike Falcon

Crowdstrike Zta Integration

Crowdstrike

Crt Sh

Cryptotester

Csp Bypass

Csp Evaluator

Csp Scanner

Csrftester

Ct Woodpecker

Ctid Att Ck Workbench

Cuckoo Sandbox

Cuckoodroid

Curl

Custom Python Scripts

Custom Scripts

Cvss Scoring

Cwp

Cyberark Or Beyondtrust For Secure Administrative Operations

Cyberark Privileged Access Security

Cyberark

Cyberchef

Cyclonedx Python Lib

Cycript

Cylr

Dalfox

Damerau Levenshtein

Dark Web

Data Classification Insights

Database Extraction

Datadog

Db Browser For Sqlite

Dbeaver

Dc3dd

Dce Rpc

Dcfldd

Dcsync

Dd

De Identifying

De4dot

De4js

Debug Endpoints

Decoding Resources To Near Original Form

Decompiler

Decrypting

Deepset

Defanging

Defectdojo

Delinea Distributed Engine

Delinea Secret Server

Demo Yubico Com

Dependabot

Deploy Configuration Profiles

Deployed In Dmz For Enterprise Access

Detect It Easy

Developer Portal

Device

Dhcp

Dialog

Dig

Digital Guardian

Dionaea

Dirbuster

Distroless Images

Distroless

Dive

Dkimpy

Dll Export Viewer

Dll

Dlp Policies New Dlpcompliancepolicy

Dlp Policies

Dlp Violations

Dlp

Dnp3

DNS Brute Forcing

DNS Filtering

DNS Logs

DNS Queries

DNS Query Analysis

DNS Response Policy Zone

DNS Spoofing

DNS Tunneling

DNS With Cross Platform Implants

DNS

Dnspy

Dnspython

DNSRecon

DNSRecon is a Python-based DNS enumeration tool for security assessments that automates record discovery, zone transfer testing, DNSSEC zone walking, cache snooping, reverse lookups, and wordlist-based subdomain brute forcing, with export to XML/CSV/JSON and optional REST API and Shodan-assisted enrichment.

Dnssec Validation

Dnstwist

Dnsx

Docker Bench Security

Docker Buildkit

Docker Diff

Docker Explorer

Docker Inspect

Dom Invader

Dom

Domain

Domains

Dompurify

Dotdotpwn

Dotfuscator

Dotpeek

Drag And Drop Playbook Builder With 2 800 Automated Actions

Dragos Platform

Dredd

Drivers

Drozer

Dsdump

Dsinternals Powershell Module

Dsinternals

Dtd Finder

Dtex Intercept

Dumpit

Duo Security

Duo

Eclecticiq

Ed25519

Ediscovery

Editcap

Editing

Edr And Process Telemetry

Edr

Elastic Agent

Elastic Detection Rules

Elastic Endpoint Security

Elastic Endpoint

Elastic Kibana Dashboard

Elastic Security Eql

Elastic Security

Elastic Siem Ml Jobs

Elastic Siem

Elastic Stack

Elastic

Elasticsearch

Elf

Elk Stack

Email Gateway

Email Security

Email Templates

Email

Emet

Employee Names

Emux

Enabling Auditing Of Enclave Originated Cryptographic Operations

Enabling Comparison Of Planned Vs Executed Vs Detected Techniques

Enabling Download Count Comparison Between Suspected Typosquats And Their Targets

Enabling

Encoders

Encrypting Responses To The Enclave S Ephemeral Public Key

Encryption As A Service

Encryption

Endpoint Protector

Endpoint Verification

Engineering Workstations

Entropy Analysis

Entropy Calculation

enum4linux-ng

A next-generation rewrite of enum4linux that enumerates information from Windows and Samba systems via SMB/RPC/LDAP, adds structured JSON/YAML output, and wraps core Samba client tools for use by security professionals and CTF players.

Envoy Proxy

Envoy Rate Limit Service

Eql Sequences

Eric Zimmerman S Tools

Eric Zimmerman Tools

Error Messages

Erythrite

Escalation

Eslint Security Plugin

Espresso

Essential For Blind Stored Xss

Et Pro

Etc

Ethernet

Ettercap

Evebox

Event Classification

Event Log Explorer

Eventbridge And Lambda To Enable Real Time Incident Response

Evilginx2

Evilginx3

Evtxecmd

Evtxexport

Exabeam Advanced Analytics

Exabeam

Examining Memory

Excel

Exec

Execution Role Permissions

Exiftool

Exploit

Exploits

Express Rate Limit

Extracting Dxe Drivers

Extracting Vba Macros

Extracting

Extrahop

Fail2ban 0 11

Fail2ban Client

Fail2ban Regex

Fake Router6

Fakenet Ng

Falco And Opa Policies

Falco Rules

Falco

Falcon Data Replicator

Falcon Siem Connector

Farsight Dnsdb

Feeding Results Into Splunk

Feitian

Fema Homeland Security Exercise And Evaluation Program

Fema Hseep

Feodo Tracker

Feroxbuster

Ffmpeg

ffuf

ffuf is a fast, flexible web fuzzer for web content discovery and request templating. It automates path, parameter, and virtual host discovery using wordlists and response-based match/filter logic, supporting machine-readable outputs for integration into broader security workflows.

Fido2 Security Keys

Fido2

Field Suggestions

File Extraction

File Systems

File

Filebeat

Filesystem

Filesystems

Filtering By Function Code

Filtering

Findcrypt

Firewall Zones

Firmadyne

Firmae

Firmware Mod Kit

Flare

Flashpoint

Flashrom

Flask Limiter

Fleetdm

Floss

Fls

Fluentd

Forcepoint Dlp

Forcepoint Insider Threat

Foremost

Forseti Security

Fortinet Fortigate Rugged Series

Fortinet Fortigate Rugged

Freddy

Freeradius

Frida Discover

Frida Ios Dump

Frida Repl

Frida Tools

Frida Trace

Frida

Frogger

Frrouting

Fsrm

Ftk Imager

Fulcio

Function Codes

Fusion Ml Engine

Fuzz Lightyear

Fwaas

Gam

Gatekeeper

Gatling

Gattacker

Gcloud Cli

Gcloud Compute Firewall Rules

GCP Audit Logs

GCP Cloud Logging

GCP Event Threat Detection

GCP Identity Aware Proxy

GCP Security Auditing Tool Generating Comprehensive Risk Reports From API Data Collection

GCP Security Command Center

Gcpbucketbrute

Gdb

Generate Authentication Options

Getnpusers

Gf

Ghidra

Git Dumper

Git Filter Repo

Git Repos

Git Secrets

Github Advanced Security

Github Secret Scanning

Github Security Overview

Gitlab Ci

Gitlab Wiki

Gitleaks

Globalprotect Agent

Gmer

Gobuster Vhost

Gobuster

High-performance, wordlist-driven enumerator for web content, DNS subdomains, virtual hosts, and select cloud/TFTP targets.

Godpotato

Google Admin Console

Google Argon

Google Beyondcorp Enterprise

Google Cloud Dlp API

Google Cloud Iap

Google Titan Storing Cryptographic Credentials For Phishing Resistant Authentication

Google Workspace Alert Center

Gopherus

Gophish

Gowitness

Gpg

Gpresult

Gradient Boosting

Grafana

Graph Analysis

Graphql Cop

Graphql Voyager

Grassmarlin

Greenbone

Greynoise

Grficsv2

Gridsure

Group Policy Management Console

Group Policy

Groups

Grr Rapid Response

Grype

Gtfobins

Guardduty Lambda Protection

Guardicore Agents

Guardicore Centra

Guardicore Insight

Guardicore Reveal

Guardrails Ai

Guest Management

H2csmuggler

Hackvertor

Hadolint

Handshake Capture

Harbor

Hardcoded Secrets

Hardenize

Hardware Tokens

Hashcat

A high-performance, cross‑platform password recovery tool that supports hundreds of hash and key‑derivation formats, multiple attack modes, and GPU/accelerator backends for offline credential security testing.

Hashdeep

Hashes

Hashicorp Boundary

Hashicorp Vault

Hashlib

Have I Been Pwned Enterprise

Haveibeenpwned

Havij

Havoc

Hayabusa

Hcxdumptool

Hcxtools

Hdparm

Hex

Hidden Processes

Hierarchical Firewall Policies

Hindsight

Hipaa

Historians

Hmac Sha256

Hmi

Hollows Hunter

Honeydb

Honeywell Forge Cybersecurity

Hooking

Host Lists

Hostapd Mana

Hosts

Hp Aruba Cx

Hping3

Hstspreload Org

Hvac

Ory Hydra

Ory Hydra is an open-source, OpenID Certified OAuth 2.0 and OpenID Connect (OIDC) authorization server that exposes headless APIs for issuing and managing tokens used to protect APIs and applications.

I2c

Iac Scanning

Iam Access Analyzer

Iam Policy Simulator

Iam Recommender

Iap Tcp Forwarding

Ibm Qradar Siem

Icarus

Icat

Icmp With Control Over Flags

Icmp

Ics Aware Ids And Protocol Deep Packet Inspection

Id Ransomware

Ida Pro And Ghidra With Techniques For Handling Non Null Terminated Strings

Ida Pro

Identity Filtering

Identityiq Compliance Manager

Identityiq Report Builder

Ideviceinstaller

Ids Signatures

Idt Hooks

Idt

Iec 60870 5 104

Iec 62443 And Nist Sp 800 82 Guidelines

Iexplorer

Ileapp

Ilspy

Images

Immersive Labs

Impacket Secretsdump Py

Impacket

Open-source Python library and example tools that implement and manipulate network protocols (notably SMB, MSRPC, Kerberos, NTLM, LDAP, MSSQL) to enable low-level packet crafting, protocol clients, and security testing workflows across Windows-centric enterprise networks. ([github.com](https://github.com/fortra/impacket))

Implementation Tiers To Measure Organizational Cybersecurity Posture And Create Improvement Roadmaps

Imports

Indicators

Inetsim

Infection Monkey

Infoblox DNS Firewall

Injected Processes

Inql

Inspecting

Integration

Intel 471

Intent Fuzzer

Interact Sh

Interactsh

Interception

Intruder

Intune App Sdk

Intune App Wrapping Tool

Invoke Atomicredteam

Ioc Tables

Iocextract

Iot

Ip Addressing

Ip Ranges

Ip

Iperf3

Ips

Iptables

Irp Hooks

Is Is With Rpki Validation Capabilities

Ja3

Jadx

Jamf Pro

Jaro Winkler

Java

Jefferson

Jira Service Management

Jira

Jitter

Jlecmd

Joe Sandbox

John the Ripper

John the Ripper is an open-source, offline password auditing tool from Openwall. The community “Jumbo” edition adds extensive hash/credential format support and optional GPU acceleration via OpenCL.

Jpeginfo

Jq

Jscrambler

Jsdetox

JSON For Ci

JSON Schema Compliance

Jsql Injection

Junit

JWT Editor

JWT Io

JWT Tool

Kadimus

Kamacite

Kape

Kerberos Used For Relay Attacks And Remote Execution

Kerberos

Kev Catalog

Key Confusion

Kics

Kinesis Firehose

King Phisher

Kismet

Kiterunner

Kmstool Enclave Cli

Kolide

Kong Gateway

Kong Rate Limiting Plugin

Kube Bench

Kubeaudit

Kubectl

Kubernetes

Kubesec

Kubiscan

Kyverno

Label Policies

Landing Pages

Last

Launching

Layers

Lazagne

Ldap Integration

Ldap

Lecmd

Levenshtein Distance Use For Proactive Phishing Domain Detection And Certificate Monitoring

Levenshtein Distance

Lfisuite

Lgpo Exe

Lib4sbom

Libimobiledevice

Librosa

Lifecycle Management

Lightweight Pattern Matching Sast Tool With 3000 Community Rules And Custom Rule Support

Lime And Volatility

Lime

Linked Libraries

linPEAS

An open-source Linux/Unix privilege-escalation enumeration script in the PEASS-ng suite that audits a host for misconfigurations, vulnerabilities, and environmental conditions that could enable local privilege escalation.

Linux Exploit Suggester

Listing

Llm API Gpt 4

Llm Based Detection

Lnk Explorer

Lnk Parser

Lnkparse3

Location

Log Analytics Workspace

Log2timeline

Logparser

Lolbas Project

Lolbas

Lsblk

Lynis

Macos

Mactime

Magnet Axiom

Magnet Ram Capture

Mailhog

Malleable C2 Profiles

Malpedia Yara

Malpedia

Maltego

Malware Families

Malware Mutex

Malwarebazaar

Manage Bde Exe

Mandiant Advantage Threat Intelligence

Manually Banning

Maps

Markets

Marshalsec

Mbam

Meat

Memcached

Memory

Memprocfs

Mergecap

Metasploit Framework

An extensible Ruby-based platform from Rapid7 for developing, testing, and executing exploits, payloads, and related modules against target systems, with data management and remote APIs for integration into security workflows.

Mfa

Mftecmd

Mftexplorer

Microsoft 365 Defender Portal

Microsoft Defender Device Control

Microsoft Defender Exploit Guard

Microsoft Defender For Cloud Apps

Microsoft Defender For Cloud

Microsoft Defender For Endpoint API

Microsoft Defender For Endpoint

Microsoft Defender For Identity

Microsoft Defender For Office 365

Microsoft Defender For Storage

Microsoft Defender Portal

Microsoft Dsrm

Microsoft Entra Admin Center

Microsoft Entra Id Conditional Access

Microsoft Entra Id Governance

Microsoft Entra Id Protection

Microsoft Graph And Audit Logs

Microsoft Graph API Audit Logs

Microsoft Graph API To Detect Email Forwarding Rule Creation

Microsoft Graph API

Microsoft Graph Powershell Sdk

Microsoft Graph Security API

Microsoft Intune

Microsoft Laps

Microsoft Nps

Microsoft Presidio

Microsoft Purview Compliance Portal

Microsoft Purview Dlp

Microsoft Purview

Microsoft Security Compliance Toolkit

Microsoft Sentinel Ueba

Microsoft Sentinel Workbooks

Microsoft Sentinel

Microsoft Threat Intelligence

Microsoft Word

Mimikatz Lsadump

mimikatz

Open‑source Windows security research tool by Benjamin Delpy (gentilkiwi) best known for extracting credentials from memory and manipulating authentication artifacts (e.g., LSASS contents, Kerberos tickets) and performing directory replication–based credential access (DCSync).

Minio

Mips

Misconfigurations

Misp Correlation Engine

Misp

Mitigations

Mitm6

Mitmproxy

MITRE Att Ck Groups

MITRE Att Ck Navigator

MITRE Att Ck

MITRE Att

MITRE Caldera

Mitreattack Python

Mixers

Mmls

Mobsf

Modbus

Modifying

Modsecurity

Module

Modules

Moneta

Mongodb Shell

Monitoring

Mozilla Observatory

Mschapv2

Msrpc

Multi Step Attack Chains Beyond Single Atomic Tests

Mutation

Mxtoolbox

Mythic

Mzcacheview

Ndiff

Ndpmon

Nemesis

Neo4j

Nessus Expert

Nessus Professional

Nessus

Netbox

Netflow

Netgate Autoconfigbackup

Netskope Casb

Netskope

Network Capture

Network Captures

Network Flows

Networking

Networkminer

New Dlpcompliancerule

Newman Reporter Htmlextra

Newman

Nextdns

Nfc

Ngrep

Nightfall Ai

Nikto

Nikto is a Perl-based web server scanner that performs tests for dangerous files/CGIs, outdated server software, and common misconfigurations, producing machine- and human-readable reports.

Nist 800 53

Nist Csf

Nist

Nitro Cli

Nitro Enclaves Acm

Nmap 7 90

Nmap Parse Output

Nmap With Ot Scripts

Nmap

Nmap is a widely used, open-source scanner for network exploration and security auditing that discovers hosts, enumerates open ports and services, identifies software/OS fingerprints, and supports extensible scripting for higher-level checks.

No More Ransom Project

No More Ransom

Node Js Vm Module

Node Js

Nodejs

Nomoreransom Org

None Bypass

Nosql

Nosqli

Nosqlmap

Notation

Now Deprecated

Nozomi Guardian

Nozomi Networks Guardian

Nozomi

Nping

Npm Audit

Npm Download Counts API

Npm Registry API

Nrf52840 Usb Dongle Nrf Sniffer

Nsrl

Nsurlsession

Ntfs Log Tracker

Ntlm Hashes

Ntlmrelayx

Ntlmssp Authentication

Nuclei

Nudge Security

Nvdlib

Nvidia Nemo Guardrails

Nxlog

Oauth Tools Com

Oauth2 Security Tester

Obfuscator

Objection

Ofac Sdn List

Offense Management

Offense Operations

Okta Advanced Server Access

Okta Device Trust

Okta Identity Engine

Okta Identity Governance

Okta Workflows

Okta

Oledump Py

Oletools

Ollama

One Class Svm

One Identity Manager

Opa

Opc Ua

Opc

Open Policy Agent

Open Ports

Openai Guardrails Python

Openapi Specifications And JSON Schema To Enforce Input

Opencanary

Opencti Graph

Opencti Reports

Opencti

Openpgp

Openplc

Openredirex

Openscap

Openssl

Openstego

Opentaxii

Openvas

Openvpn

Or External Remediation Systems

Or In Memory Stores

Or Organization

Or Public Key

Or Route Alerts Based On Enrichment Results

Or Third Party Analytics

Organized By Technique Id

Os Detection

Os Version

Osint Framework

Osisoft Pi Server

Ospf

Osquery Go

Osquery

Ossec

Otool

Overprivileged Roles

Owasp Dependency Check

Owasp Dependency Track

Owasp Llm Top 10

Owasp Risk Rating Methodology To Separate True Positives From False Positives And Prioritize Remediation

Owasp Serverless Top 10

Owasp Threat Dragon

Owasp Zap

Oxml Xxe

Oxt Me

Packet Parsing

Packetfence

Pacu

Pagerduty

Palantir Wef Configuration

Palo Alto Iot

Palo Alto Networks Ngfw

Palo Alto Ngfw

Palo Alto Xsoar

Palo Alto

Param Miner

Parameter Fuzzing

Parasite6

Parsing

Passivedns

Password Rotation

Payloads

Payloadsallthethings

Pci Dss

Pdf Parser Py

Pdf Parser

Pdfid Py

Pdfid

Pdfs

Pe Bear

Pe Sieve

Peap

Pecmd

Peepdf 3

Peepdf

Pefile

Persistence

Persistencesniper

Pestudio

Pfblockerng

Pfsense 2 7

Pfsense

Pg Restore

Phishtool

Photorec

Php Interactive Shell

Phpggc

Phpstan

Pi Vision

Pingcastle

Pip Audit

Pir Tracking

Piv

Pkce

Pkcs 11 Interface For Cryptographic Key Management

Plaso

Plcinject

Plus Repeater And Intruder For Manual Payload Testing

Policies

Policy Analyzer

Popularity

Port Scanning

Port Security

Port

Postgresql For Siem Integration

Postman Collection Runner

Postman Flows

Postman

Posture Assessment

Posture

Power Bi

Powerpc Architectures Common In Plcs

Powershell Get Mppreference

Powershell Get Wmiobject

Powershell Logging

Powershell

Ppfuzz

Praat

Pre Commit

Prefetch Hash Calculator

Prelude Operator

Principal Mapper

Printspoofer

Prioritization

Prisma Access

Privilege Escalation Vectors

Privilege Escalation

Privileged Access Management

Process Hacker

Process Kill

Process Monitor

Process Trees

Processes

Processmitigations Powershell

Proofpoint Tap

Proofpoint

Protectai

Prototype Pollution Gadgets Scanner

Prowler Azure

Prowler

Psfalcon

Psort

Psutil

Ptes Methodology

Public Access

Pulledpork 3

Py Webauthn

Pybgpstream

Pycryptodome

Pyelftools

Pyjwt

Pymisp

Pymodbus

Pypi JSON API

Pypistats Org API

Pypykatz

Pysigma

Pyspf

Pytector

Python Cryptography Library For Certificate Generation And Ssl Module For TLS Verification Validates Certificate Chains

Python Evtx

Python Fido2

Python Levenshtein

Python Pandas For Statistical Analysis

Python Pandas For Traffic Pattern Analysis And Domain Classification

Python Prefetch

Python Registry

Python Threading

Python Watchdog For Real Time Filesystem Monitoring

Python Websockets

Python

Qpdf

Qradar API

Qradar Assistant

Qradar Pulse

Qradar Use Case Manager

Qradar

Qualys Vmdr

Queryable Via The Rfc 6962 API At Their Respective Log Urls

Querying Status

Quota Management

Rabin2

Racepwn

Radare2

Rakkess

Ransomware Readiness Assessment

Rapid7 Insightvm

Rapidfuzz

Rate Limiting

Rbac Tool

Rbndr Us

Rclone

Rdp

Reactor

Reading Uefi Variables

Rebinder Net

Rebuff

Recmd

Recon Ng

Recorded Future Dark Web Module

Recorded Future Threat Intelligence

Recorded Future

Redirect Chains

Redis

Register Addresses

Registry Changes

Registry Explorer

Registry

Regripper For Windows Artifacts

Regripper

Regulatory Compliance

Rekall

Rekor Cli

Rekor

Relativity

Replaced By Intune

Repos

Requests

Resemblyzer

Resources

Responder

Open-source LLMNR/NBT-NS/mDNS poisoner and rogue authentication servers used to coerce and capture Windows network credentials and facilitate NTLM relay in Active Directory environments.

Restic

Resticpy

Restler

Results

Retire Js

Retirejs

Reverse Lookup

Risk Based Alerting

Rita

Rkhunter

Roles

Ropgadget

Rotation

Route Leaks

Routinator

Rpki

Rsyslog

Rtu

Rubeus

Rubrik Instant Recovery

Rubrik Security Cloud

Rubrik

Rule Compilation

Rule

Runtime Errors

S3 Storage Lens

S3

S3audit

S4u2self And S4u2proxy Extensions For Lateral Movement And Privilege Escalation

S7comm

Safe Attachments

Sailpoint Identityiq

Sailpoint Rest API

Sailpoint

Samhain

Saml Azure Ad

Sandbox Reports

Sans Picerl Framework

Sarif Viewer

Sasquatch

Saviynt Enterprise Identity Cloud

Saviynt

Sbecmd And Shellbags Explorer

Scalpel

Scanning

Scapy

Scdbg

Scheduled Tasks

Schema Analysis

Schemathesis

Scikit Learn

Scirius

Scorecard

Scoutsuite

Scripting Tests

Scylla

Search Engines

Searchable By Identity

Searchable By Ip

Seclists

Secret Scanning

Secret Server Rest API

Secret Server Sdk

Secretfinder

Secretsdump Py

Sections

Secure Boot

Secure

Security Command Center

Security Compliance Powershell

Securityheaders Com

Securityheaders

Securonix

Segment

Sel 3620 Ethernet Security Gateway

Semgrep

Sentinel

Sentinelone

Server Side Prototype Pollution

Service Accounts

Service Enumeration

Service Principal Names

Servicenow Itsm

Servicenow Performance Analytics

Servicenow

Session Controls

Session Recording

Set Label

Set

Setting Pins

Sha256sum

Share Enumeration

Shares

Shellbags Explorer

Sherlock

Shodan

Siem Pipelines Use When Building Kernel Level Runtime Security Observability For Linux Hosts Or Kubernetes Clusters

Siem Platforms Activates For Requests Involving Auditd Analysis

Siem Splunk

Siemens Productcert

Siemens Sinema Remote Connect

Siga Ot Solutions

Sigcheck

Sigfind

Sigma Rules

Sigma

Sigmahq

Sigstore Policy Controller

Sigstore

Single Packet Authorization

Singularity

Slither And Mythril To Detect Reentrancy

Sliver Framework

Sliver

Smartassembly

Smartctl

Smbclient

Smtp

Smtp4dev

Smtplib

Smuggler Py

Sniffer

Snorby

Snort 3

Snort Rules

Snort

Sns

Snyk Advisor

Snyk Cli

Snyk Iac

Snyk Open Source

Snyk

Soc 2 With Policy As Code

Socket Io Client

Sod Violation Summaries

Software

Spectral Feature Extraction

Speechbrain

Spi

Spiderfoot

Splunk Attack Analyzer

Splunk Cim

Splunk Dashboard Studio

Splunk Enterprise Security

Splunk Enterprise

Splunk Es Adaptive Response

Splunk Es Risk Based Alerting

Splunk Es

Splunk Itsi

Splunk Soar Rest API To Create Containers

Splunk Soar

Splunk Spl

Splunk Stream

Splunk Uba

Splunk With Cip Content Pack

Splunk

Spycloud

Sql Queries

Sqlite3

sqlmap

sqlmap is an automated framework for detecting and exploiting SQL injection vulnerabilities in web applications and services, with extensive DBMS fingerprinting, data enumeration, and post-exploitation capabilities.

Ssdt Analysis

SSH And Logs Access Attempts

Ssl Certificate

Ssl From Live Or Captured Traffic

Ssl Kill Switch2

Ssl Suitable For Hunting

Sslstrip

Sslstrip2

Sslunpinning

Ssm Automation

Sspm Tools

Ssrf

Ssrfmap

Sstimap

Ssvc Framework

Starting Activities

Status Checking

Steampipe

Steghide

Stegoveritas

Stegseek

Stegsolve

Stepsecurity Harden Runner

Stix 2 1

Stix2

Storage

Storing

Stp

Strace

Strata Cloud Manager

Stream Decompression

Stream Reassembly

Streams Exe

Strings

Styra Das

Subdomains

Subfinder

Subjack

Subprocess With Shell True

Superseded By Scc But Still Referenced In Compliance Frameworks

Supporting Levenshtein

Supporting Multi Turn Dialog Control

Suppress

Surebackup Verification

Suricata 7 0

Suricata Update

Suricata With Et Open Ics Rules

Suricata

Suspicious Files

Swagger Codegen

Swagger Ui Detector

Swaks

Swg

Syft

Symantec Dlp

Sysdig

Sysinternals Autoruns

Sysinternals Handle

Sysinternals Rootkitrevealer

Sysinternals Suite

Sysmon Event Id 10

Sysmon Event Ids 8 And 10 And Edr Process Telemetry

Sysmon V13

Sysmon

T Pot

Tabletop Exercise Framework

Tabletop Scenarios

Tag Immutability

Task Tracking

Taxii2 Client

Tc

Tcp

tcpdump

A command-line packet capture and analyzer that uses libpcap to sniff, filter, display, and save network traffic in pcap/pcapng formats for security investigation and troubleshooting.

Tcpreplay

Tenable Io

Tenable Nessus

Tenable Ot Security To Identify Vulnerabilities Without Disrupting Industrial Processes Or Crashing Legacy Controllers

Terrascan

Testdisk

Testing

Testssl Sh

Tetragon

Tfsec

Thc Ipv6 Toolkit

The Sleuth Kit

theHarvester

theHarvester is an open‑source reconnaissance tool used to passively and selectively actively enumerate emails, subdomains/hosts, IPs and related URLs for a target domain using multiple public data sources.

Thehive Cortex

Thehive

Then Live Migrates To Production

Then Replay With Regular User Token To Test Function Level Authorization

Thinkst Canary

Thread Stacks

Threat Detection

Threat Intelligence Framework

Threatconnect Reports

Threatconnect Tc Exchange

Threatconnect

Threatfox

Tidal Cyber

Timeline Explorer

Timeline

Timesketch

Timestomping

Tines

Tldextract

Tofino Xenon

Tofino

Token Renewal

Tooling

Toxicity

Tplmap

Tracking Reviewer Progress

Trellix

Trend Analysis

Triggering Behavioral Alerts On Canary Modification

Tripwire Enterprise

Tripwire

Trivy Action

Trivy Operator

Trivy

Troubleshooting

Trufflehog V3

Trufflehog

Trunking

Trustkit

Tshark

Ttl

Turbo Intruder

U2f

Ubertooth One Ubertooth Btle

Udp

Ueba

Uefitool

Uncoder Io

Unified Audit Log

Unsquashfs

Upload Timestamps

Uploading

Upx

Url Categorization And Risk Based Routing

Url Inspection

Url

Urls

Urlscan Io

Urlscan

Usb C

Usb Forensic Tracker

Usbdeview

Useful For Observing Injection Sequences In Real Time

Users

Using Error Based Field Discovery

Valence Security For Saas Configuration Monitoring

Varnish Cli

Varnishlog

Vault Agent Injector

Vault Agent

Vault Csi Provider

Vault Radar

Vault Secrets Operator

Vb Net

Vector Similarity

Vectr

Veeam Backup Replication 12

Veeam Backup Replication

Veeam Instant Recovery

Veeam

Velero

Velociraptor

Verify Registration Response

Verifying Chains

Verifying Firmware Write Protection

Verifying Signatures

Verifying

Version History

Version Probing

Versions

Vipermonkey

Virustotal Integration

Virustotal

Visualization

Vmware Workspace One

Volatility (Volatility Framework)

Volatility is a Python-based framework for extracting and analyzing digital artifacts from volatile memory snapshots across Windows, Linux, and macOS; Volatility 3 is a modern rewrite that uses symbol tables instead of static profiles and a layered architecture to parse diverse memory image formats.

Volatility3 Linux Plugins

Volatility3 Plugins To Identify Nop Sled Patterns

Volatility3 Plugins

Vpc Flow Logs

Vql Queries

Vtp

Vulnerability Assessment

Vulnerability Findings

Vulnerability Management

Vulnerability Scanning

Vulnerability Tracking

Waf Bypass Com

Waf Integration

Waf Logs

Waf Security Automations

Wafw00f

Walletexplorer

Warp Client

Watchdog

Waterfall Security Solutions

Waterfall Security Unidirectional Gateway

Waterfall Security

Wayback Machine

Wazuh

Wdac Wizard

Wdac

Web Cache Vulnerability Scanner

Web Scraping

Webauthn Io

Webhook Site

Websocat