ANSSI

All

72 repositories

ADTimeline
Public
Timeline of Active Directory changes with replication metadata
windows splunk active-directory forensics dfir timeline powershell
PowerShell
•
GNU General Public License v3.0
•60•490•0•0•Updated Mar 21, 2025Mar 21, 2025
eurydice
Public
A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
Python
•
GNU Affero General Public License v3.0
•8•135•0•1•Updated Mar 21, 2025Mar 21, 2025
fuzzysully
Public
Python
•
GNU General Public License v2.0
•0•19•0•0•Updated Mar 18, 2025Mar 18, 2025
MLA
Public
Multi Layer Archive - A pure rust encrypted and compressed archive file format
Rust
•
GNU Lesser General Public License v3.0
•21•335•18•5•Updated Mar 13, 2025Mar 13, 2025
DFIR-O365RC
Public
PowerShell module for Office 365 and Azure log collection
devops forensics dfir azure-active-directory office365 exchangeonline powershell azure
PowerShell
•
GNU General Public License v3.0
•30•261•2•0•Updated Mar 10, 2025Mar 10, 2025
IPECC
Public
A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration
asic fpga ecc vhdl elliptic-curve-cryptography
VHDL
•
Other
•9•36•1•0•Updated Mar 3, 2025Mar 3, 2025
ORADAZ
Public
Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data
Rust
•
GNU General Public License v3.0
•1•18•0•0•Updated Feb 27, 2025Feb 27, 2025
chipsec-check
Public
Tools to generate a Debian Linux distribution with chipsec to test hardware requirements
intel chipsec secureboot-key
Shell
•
BSD 2-Clause "Simplified" License
•7•48•0•0•Updated Feb 25, 2025Feb 25, 2025
bits_parser
Public
Extract BITS jobs from QMGR queue and store them as CSV records
windows incident-response forensics
Python
•
MIT License
•6•75•2•0•Updated Feb 13, 2025Feb 13, 2025
bootcode_parser
Public
A boot record parser that identifies known good signatures for MBR, VBR and IPL.
windows forensics vbr bootkit bios mbr ipl boot-record
Python
•
GNU General Public License v3.0
•23•97•3•0•Updated Feb 12, 2025Feb 12, 2025
HDMIprogram
Public
Logiciel permettant de programmer un pare-feu HDMI matériel (nécessite une câble spécifique).
i2c imgui hdmi edid
C++
•
MIT License
•0•0•0•0•Updated Feb 5, 2025Feb 5, 2025
lidi
Public
Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction
rust raptorq diode data-diode networking
Rust
•
GNU Lesser General Public License v3.0
•14•74•2•0•Updated Jan 23, 2025Jan 23, 2025
bmc-tools
Public
RDP Bitmap Cache parser
Python
•
CeCILL Free Software License Agreement v2.1
•89•513•1•0•Updated Jan 21, 2025Jan 21, 2025
ORADAD
Public
Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
C++
•
GNU General Public License v3.0
•29•241•6•0•Updated Jan 8, 2025Jan 8, 2025
.github
Public
1•0•0•0•Updated Dec 6, 2024Dec 6, 2024
orc2timeline
Public
orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
Python
•
GNU Lesser General Public License v3.0
•2•32•0•1•Updated Nov 25, 2024Nov 25, 2024
DFIR4vSphere
Public
Powershell module for VMWare vSphere forensics
vmware vmware-esxi forensics vmware-vsphere powershell dfir
PowerShell
•
GNU General Public License v3.0
•18•150•0•0•Updated Nov 8, 2024Nov 8, 2024
OSAKA
Public
Outil de sécurité des architectures kubernetes avancées
Python
•
GNU General Public License v3.0
•4•50•0•1•Updated Nov 7, 2024Nov 7, 2024
DECODE
Public
Malware detection tool for Windows PE files based on DFIR ORC data
windows machine-learning splunk forensics anomaly-detection malware-detection
Python
•
BSD 3-Clause "New" or "Revised" License
•0•7•0•0•Updated Oct 18, 2024Oct 18, 2024
guide-journalisation-microsoft
Public
Guide journalisation Microsoft
PowerShell
•6•60•0•0•Updated Jul 15, 2024Jul 15, 2024
rust-guide
Public
Recommendations for secure applications development with Rust
recommendations rust good-practices secure-coding
Shell
•
Other
•48•602•17•9•Updated Jul 10, 2024Jul 10, 2024
libdrbg
Public
A portable library implementing NIST SP 800-90A DRBGs
hmac-drbg sp800-90a drbg ctr-drbg hash-drbg c cryptography crypto
C
•
Other
•7•13•0•1•Updated Jul 8, 2024Jul 8, 2024
pycrate
Public archive
A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.
1•5•0•0•Updated Mar 14, 2024Mar 14, 2024
AnoMark
Public
Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs
Python
•
GNU General Public License v3.0
•3•83•0•0•Updated Feb 21, 2024Feb 21, 2024
pciemem
Public
Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test
C
•4•11•0•0•Updated Jan 8, 2024Jan 8, 2024
ProTIP
Public archive
ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express
Prolog
•
MIT License
•0•10•1•0•Updated Nov 9, 2023Nov 9, 2023
Faults_experiments
Public archive
Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI
Python
•
Other
•0•2•0•0•Updated Sep 18, 2023Sep 18, 2023
Faults_analyzer
Public archive
Logiciel d'analyse de campagnes de perturbations sur composants
Python
•
Other
•2•6•0•0•Updated Sep 18, 2023Sep 18, 2023
DroidWorks
Public
Rust
•
GNU General Public License v3.0
•0•5•0•0•Updated Jul 30, 2023Jul 30, 2023
cry-me
Public
CRY.ME (CRYptographic MEssaging application)
android challenge cryptography crypto ctf ctf-challenges
Kotlin
•
Other
•6•169•0•0•Updated Jun 20, 2023Jun 20, 2023