Skip to content

@ANSSI-FR ANSSI

Change the repository type filter

All

    Repositories list

    72 repositories

    • ADTimeline

      Public
      Timeline of Active Directory changes with replication metadata
      windowssplunkactive-directoryforensicsdfirtimelinepowershell
      PowerShell
      •
      GNU General Public License v3.0
      •60•490•0•0•Updated Mar 21, 2025Mar 21, 2025

    • eurydice

      Public
      A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
      Python
      •
      GNU Affero General Public License v3.0
      •8•135•0•1•Updated Mar 21, 2025Mar 21, 2025

    • fuzzysully

      Public
      Python
      •
      GNU General Public License v2.0
      •1•22•0•1•Updated Mar 18, 2025Mar 18, 2025

    • MLA

      Public
      Multi Layer Archive - A pure rust encrypted and compressed archive file format
      Rust
      •
      GNU Lesser General Public License v3.0
      •21•335•18•5•Updated Mar 13, 2025Mar 13, 2025

    • DFIR-O365RC

      Public
      PowerShell module for Office 365 and Azure log collection
      devopsforensicsdfirazure-active-directoryoffice365exchangeonlinepowershellazure
      PowerShell
      •
      GNU General Public License v3.0
      •30•261•2•0•Updated Mar 10, 2025Mar 10, 2025

    • IPECC

      Public
      A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration
      asicfpgaeccvhdlelliptic-curve-cryptography
      VHDL
      •
      Other
      •9•36•1•0•Updated Mar 3, 2025Mar 3, 2025

    • ORADAZ

      Public
      Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data
      Rust
      •
      GNU General Public License v3.0
      •1•18•0•0•Updated Feb 27, 2025Feb 27, 2025

    • chipsec-check

      Public
      Tools to generate a Debian Linux distribution with chipsec to test hardware requirements
      intelchipsecsecureboot-key
      Shell
      •
      BSD 2-Clause "Simplified" License
      •7•48•0•0•Updated Feb 25, 2025Feb 25, 2025

    • bits_parser

      Public
      Extract BITS jobs from QMGR queue and store them as CSV records
      windowsincident-responseforensics
      Python
      •
      MIT License
      •6•75•2•0•Updated Feb 13, 2025Feb 13, 2025

    • bootcode_parser

      Public
      A boot record parser that identifies known good signatures for MBR, VBR and IPL.
      windowsforensicsvbrbootkitbiosmbriplboot-record
      Python
      •
      GNU General Public License v3.0
      •23•97•3•0•Updated Feb 12, 2025Feb 12, 2025

    • HDMIprogram

      Public
      Logiciel permettant de programmer un pare-feu HDMI matériel (nécessite une câble spécifique).
      i2cimguihdmiedid
      C++
      •
      MIT License
      •0•0•0•0•Updated Feb 5, 2025Feb 5, 2025

    • lidi

      Public
      Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction
      rustraptorqdiodedata-diodenetworking
      Rust
      •
      GNU Lesser General Public License v3.0
      •14•74•2•0•Updated Jan 23, 2025Jan 23, 2025

    • bmc-tools

      Public
      RDP Bitmap Cache parser
      Python
      •
      CeCILL Free Software License Agreement v2.1
      •89•513•1•0•Updated Jan 21, 2025Jan 21, 2025

    • ORADAD

      Public
      Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
      C++
      •
      GNU General Public License v3.0
      •29•241•6•0•Updated Jan 8, 2025Jan 8, 2025

    • .github

      Public
      1•0•0•0•Updated Dec 6, 2024Dec 6, 2024

    • orc2timeline

      Public
      orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
      Python
      •
      GNU Lesser General Public License v3.0
      •2•32•0•1•Updated Nov 25, 2024Nov 25, 2024

    • DFIR4vSphere

      Public
      Powershell module for VMWare vSphere forensics
      vmwarevmware-esxiforensicsvmware-vspherepowershelldfir
      PowerShell
      •
      GNU General Public License v3.0
      •18•150•0•0•Updated Nov 8, 2024Nov 8, 2024

    • OSAKA

      Public
      Outil de sécurité des architectures kubernetes avancées
      Python
      •
      GNU General Public License v3.0
      •4•50•0•1•Updated Nov 7, 2024Nov 7, 2024

    • DECODE

      Public
      Malware detection tool for Windows PE files based on DFIR ORC data
      windowsmachine-learningsplunkforensicsanomaly-detectionmalware-detection
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •0•7•0•0•Updated Oct 18, 2024Oct 18, 2024

    • guide-journalisation-microsoft

      Public
      Guide journalisation Microsoft
      PowerShell
      •6•60•0•0•Updated Jul 15, 2024Jul 15, 2024

    • rust-guide

      Public
      Recommendations for secure applications development with Rust
      recommendationsrustgood-practicessecure-coding
      Shell
      •
      Other
      •48•602•17•9•Updated Jul 10, 2024Jul 10, 2024

    • libdrbg

      Public
      A portable library implementing NIST SP 800-90A DRBGs
      hmac-drbgsp800-90adrbgctr-drbghash-drbgccryptographycrypto
      C
      •
      Other
      •7•13•1•1•Updated Jul 8, 2024Jul 8, 2024

    • pycrate

      Public archive
      A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.
      1•5•0•0•Updated Mar 14, 2024Mar 14, 2024

    • AnoMark

      Public
      Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs
      Python
      •
      GNU General Public License v3.0
      •3•83•0•0•Updated Feb 21, 2024Feb 21, 2024

    • pciemem

      Public
      Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test
      C
      •4•11•0•0•Updated Jan 8, 2024Jan 8, 2024

    • ProTIP

      Public archive
      ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express
      Prolog
      •
      MIT License
      •0•10•1•0•Updated Nov 9, 2023Nov 9, 2023

    • Faults_experiments

      Public archive
      Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI
      Python
      •
      Other
      •0•2•0•0•Updated Sep 18, 2023Sep 18, 2023

    • Faults_analyzer

      Public archive
      Logiciel d'analyse de campagnes de perturbations sur composants
      Python
      •
      Other
      •2•6•0•0•Updated Sep 18, 2023Sep 18, 2023

    • DroidWorks

      Public
      Rust
      •
      GNU General Public License v3.0
      •0•5•0•0•Updated Jul 30, 2023Jul 30, 2023

    • cry-me

      Public
      CRY.ME (CRYptographic MEssaging application)
      androidchallengecryptographycryptoctfctf-challenges
      Kotlin
      •
      Other
      •6•169•0•0•Updated Jun 20, 2023Jun 20, 2023