Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
-
Updated
Mar 9, 2026 - PowerShell
#
cloud-forensics
Here are 14 public repositories matching this topic...
A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365
azure incident-response dfir cybersecurity threat-hunting digital-forensics threathunting cloud-forensics azure-forensics azuresearcher azforensics unifiedauditlog powershellv5
-
Updated
Oct 29, 2022 - PowerShell
Simulates a compromise in a cloud and container environment
kubernetes aws security cloud-security cloud-forensics kubernetes-security cloudforensics docker-forensics kubernetes-forensics aws-forensics azure-forensics container-forensics
-
Updated
Dec 18, 2024 - Shell
AWS EKS Cluster Forensics
aws security incident-response dfir amazon-web-services eks eksctl eks-roles cloud-forensics eks-security eks-fargate aws-forensics eks-forensics cloud-incident-response
-
Updated
Aug 16, 2021
Powershell Based tool for gathering information related to O365 intrusions and potential Breaches
hack incident-response forensics bec m365 cloud-forensics business-email-compromise azure-forensics cloud-incident-response
-
Updated
Dec 29, 2024 - PowerShell
Scope is an open source cloud forensic tool to conduct rapid incident response in Amazon Web Services (AWS).
-
Updated
Apr 30, 2025 - Python
Scope is an open source cloud forensic tool to rapidly analyse logs, detect suspicious activity and identify malicious resources. Scope supports Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure.
-
Updated
Mar 26, 2025 - Python
Browser-based AWS CloudTrail log analyzer for incident response, security audits, and cloud forensics. No server. No dependencies. Fully client-side.
open-source aws log-analysis json-viewer incident-response dfir cybersecurity infosec aws-cloudtrail cloudtrail security-tools cloud-security blue-team cloud-forensics
-
Updated
Mar 3, 2026 - HTML
A structured digital forensics project based on ISACA training – includes notes, demos, workflows, and visual playbooks for practical analysis.
-
Updated
Aug 8, 2025
These are my writeups for cybersecurity platforms that will go in-depth on how I solved a challenge.
-
Updated
Dec 1, 2025
Apache Cloudstack
-
Updated
Jun 16, 2020 - Java
Hands-on AWS security lab investigating a simulated cloud breach through CloudTrail log analysis. Traces complete attack chain from compromised IAM credentials through privilege escalation to S3 data exfiltration. Demonstrates forensic analysis, IAM security, and incident response techniques.
aws incident-response aws-cli cloud-computing threat-hunting cloudtrail aws-security security-analysis cloud-security blue-team s3-security cloud-forensics iam-security pwnedlabs
-
Updated
Mar 9, 2026
Field guide for threat hunting in AWS: workbooks, queries, and frameworks tailored for CloudTrail, GuardDuty, Detective, and real-world SOC investigations.
aws cloud cybersecurity threat-hunting soc aws-cloudtrail aws-guardduty security-operations cloud-forensics cloud-threat-hunting
-
Updated
Oct 31, 2025
Improve this page
Add a description, image, and links to the cloud-forensics topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the cloud-forensics topic, visit your repo's landing page and select "manage topics."