afl-utils - Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

•    Python

---

As of June, 6th 2018 this project moved to Gitlab that's why this repository is archived and thus read-only until it is entirely removed from Github. Repository removal is scheduled for September, 15th 2018. Please report issues and request your merges through the new project home. All further discussion - even for existing issues - will take place there.

fuzzing security afl fuzzer python-3 crash-reporting triage automation job-management

sensible-github-labels - Github labels for teams that like workflows and structure

•    Javascript

---

I decided to trial these labels on the repo that's responsible for the JSON-Schema website, json-schema.org. While they mostly make sense, I quickly found that some labels are a little open to interpretation. The article outlines the reasoning why these new labels are better than the labels Github provides, however it doesn't include any explanation for each label, which is fine given the intention, and leaves teams to work out their own interpretations that suite their needs. If you're looking for some definitions, and maybe some examples, then hopefully my outline will give you a basis to work on. Feel free to take these and amend them as you wish.

github-labels priority organization management workflow triage

bug-handling - Documentation Repository for Bug Handling in Firefox

•    HTML

---

Documentation Repository for Bug Handling in Firefox

mozilla bugs triage process regressions feature-request

THRecon - Threat Hunting Reconnaissance Toolkit

•    PowerShell

---

Collect endpoint information for use in incident response, threat hunting, live forensics, baseline monitoring, etc. * Info pulled from current running processes or their executables on disk.

threat hunt red blue purple team incident response baseline monitor analysis scan log forensics triage recon threat-hunting security soc siem

triage - General Purpose Risk Modeling and Prediction Toolkit for Policy and Social Good Problems

•    Python

---

Predictive analytics projects require the coordination of many different tasks, such as feature generation, classifier training, evaluation, and list generation. These tasks are complicated in their own right, but in addition have to be combined in different ways throughout the course of the project. Triage aims to provide interfaces to these different phases of a project, such as an Experiment. Each phase is defined by configuration specific to the needs of the project, and an arrangement of core data science components that work together to produce the output of that phase.

triage

uac - UAC (Unix-like Artifacts Collector) is a Live Response collection tool for Incident Reponse that makes use of built-in tools to automate the collection of Unix-like systems artifacts

•    Shell

---

UAC is a Live Response collection tool for Incident Response that makes use of built-in tools to automate the collection of Unix-like systems artifacts. It respects the order of volatility and artifacts that are changed during the execution. It was created to facilitate and speed up data collection, and depend less on remote support during incident response engagements. UAC can also be run against mounted forensic images. Please take a look at the conf/uac.conf file for more details.

freebsd openbsd incident-response forensics dfir netscaler bsd collector shell-script netbsd solaris aix triage computer-forensics forensic-analysis artifact

spdk-sys - Rust bindings for SPDK

•    Rust

---

Rust bindings for SPDK. build.sh is a helper script for building SPDK fat library. It is quite rough and may not fit all use cases. Configuring & building SPDK without using it is perfectly fine. The script just shows a possible way how to do that. The only thing which matters is that at the end of build process there must be a library named libspdk_fat.so somewhere in standard library path.

rust-bindings upstream triage sys-crate spdk-sys used-by-mayastor