Skip to content

@ANSSI-FR ANSSI

Change the repository type filter

All

    Repositories list

    70 repositories

    • DECODE

      Public
      Malware detection tool for Windows PE files based on DFIR ORC data
      windowsmachine-learningsplunkforensicsanomaly-detectionmalware-detection
      Python
      •
      BSD 3-Clause "New" or "Revised" License
      •0•2•0•0•Updated Oct 1, 2024Oct 1, 2024

    • hackropole-hugo

      Public
      A Hugo theme to host Capture-The-Flag (CTF) challenges as a static website like hackropole.fr.
      HTML
      •2•6•0•0•Updated Sep 30, 2024Sep 30, 2024

    • shovel

      Public
      Web interface to explore Suricata EVE outputs
      suricatactfnetwork-monitorattack-defense-ctf
      JavaScript
      •6•39•0•0•Updated Sep 29, 2024Sep 29, 2024

    • OSAKA

      Public
      outil de reconstruction de chemins d'attaques sur Kubernettes en générant des graphes à partir d'une base de données Neo4J
      GNU General Public License v3.0
      •0•0•0•0•Updated Sep 24, 2024Sep 24, 2024

    • DFIR-O365RC

      Public
      PowerShell module for Office 365 and Azure log collection
      devopsforensicsdfirazure-active-directoryoffice365exchangeonlinepowershellazure
      PowerShell
      •
      GNU General Public License v3.0
      •28•244•0•0•Updated Sep 18, 2024Sep 18, 2024

    • MLA

      Public
      Multi Layer Archive - A pure rust encrypted and compressed archive file format
      Rust
      •
      GNU Lesser General Public License v3.0
      •19•322•16•4•Updated Sep 4, 2024Sep 4, 2024

    • lidi

      Public
      Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction
      rustraptorqdiodedata-diodenetworking
      Rust
      •
      GNU Lesser General Public License v3.0
      •13•45•3•1•Updated Jul 29, 2024Jul 29, 2024

    • ORADAZ

      Public
      Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data
      Rust
      •
      GNU General Public License v3.0
      •1•10•0•0•Updated Jul 26, 2024Jul 26, 2024

    • IPECC

      Public
      A VHDL IP for ECC (Elliptic Curve Cryptography) hardware acceleration
      asicfpgaeccvhdlelliptic-curve-cryptography
      VHDL
      •
      Other
      •8•26•1•0•Updated Jul 19, 2024Jul 19, 2024

    • guide-journalisation-microsoft

      Public
      Guide journalisation Microsoft
      PowerShell
      •6•56•0•0•Updated Jul 15, 2024Jul 15, 2024

    • rust-guide

      Public
      Recommendations for secure applications development with Rust
      recommendationsrustgood-practicessecure-coding
      Shell
      •
      Other
      •47•591•17•9•Updated Jul 10, 2024Jul 10, 2024

    • libdrbg

      Public
      A portable library implementing NIST SP 800-90A DRBGs
      hmac-drbgsp800-90adrbgctr-drbghash-drbgccryptographycrypto
      C
      •
      Other
      •7•7•0•1•Updated Jul 8, 2024Jul 8, 2024

    • bits_parser

      Public
      Extract BITS jobs from QMGR queue and store them as CSV records
      windowsincident-responseforensics
      Python
      •
      MIT License
      •6•73•2•2•Updated Jul 2, 2024Jul 2, 2024

    • ORADAD

      Public
      Outil de récupération automatique des données de l'Active Directory / Automated tool for dumping Active Directory data
      C++
      •
      GNU General Public License v3.0
      •29•215•2•0•Updated Jun 18, 2024Jun 18, 2024

    • pycrate

      Public archive
      A Python library to ease the development of encoders and decoders for various protocols and file formats; contains ASN.1 and CSN.1 compilers.
      1•5•0•0•Updated Mar 14, 2024Mar 14, 2024

    • AnoMark

      Public
      Algorithme d'apprentissage statistique permettant de créer un modèle sur les lignes de commandes des évènements "Création de Processus", afin de détecter des anomalies dans les évènements futurs
      Python
      •
      GNU General Public License v3.0
      •3•78•0•0•Updated Feb 21, 2024Feb 21, 2024

    • pciemem

      Public
      Linux kernel module for driving an USB3380 board, exposing a /dev/pciemem device node on the analysis machine representing the physical memory of the machine under test
      C
      •3•10•0•0•Updated Jan 8, 2024Jan 8, 2024

    • eurydice

      Public
      A user-friendly solution to transfer files through a physical diode using the Lidi utility, complete with data retention, file history, user accounts and admin management. Provides a scriptable API and a web interface.
      0•2•0•0•Updated Jan 8, 2024Jan 8, 2024

    • bmc-tools

      Public
      RDP Bitmap Cache parser
      Python
      •
      CeCILL Free Software License Agreement v2.1
      •84•467•1•3•Updated Dec 1, 2023Dec 1, 2023

    • ADTimeline

      Public
      Timeline of Active Directory changes with replication metadata
      windowssplunkactive-directoryforensicsdfirtimelinepowershell
      PowerShell
      •
      GNU General Public License v3.0
      •56•467•2•2•Updated Nov 9, 2023Nov 9, 2023

    • ProTIP

      Public archive
      ProTIP permet de caractériser la connectivité réelle entre composants d'une architecture PCI Express
      Prolog
      •
      MIT License
      •0•9•1•0•Updated Nov 9, 2023Nov 9, 2023

    • Faults_experiments

      Public archive
      Résultats bruts de campagnes de perturbation de composants réalisées par le laboratoire de sécurité des composants de l'ANSSI
      Python
      •
      Other
      •0•2•0•0•Updated Sep 18, 2023Sep 18, 2023

    • Faults_analyzer

      Public archive
      Logiciel d'analyse de campagnes de perturbations sur composants
      Python
      •
      Other
      •2•6•0•0•Updated Sep 18, 2023Sep 18, 2023

    • DroidWorks

      Public
      Rust
      •
      GNU General Public License v3.0
      •0•5•0•0•Updated Jul 30, 2023Jul 30, 2023

    • cry-me

      Public
      CRY.ME (CRYptographic MEssaging application)
      androidchallengecryptographycryptoctfctf-challenges
      Kotlin
      •
      Other
      •4•168•0•0•Updated Jun 20, 2023Jun 20, 2023

    • DFIR4vSphere

      Public
      Powershell module for VMWare vSphere forensics
      vmwarevmware-esxiforensicsvmware-vspherepowershelldfir
      PowerShell
      •
      GNU General Public License v3.0
      •18•138•1•0•Updated Jun 2, 2023Jun 2, 2023

    • sftp2misp

      Public
      Automation script to download JSON MISP files from a SFTP server and import them via API to a MISP instance.
      Python
      •
      GNU General Public License v3.0
      •2•15•1•1•Updated May 12, 2023May 12, 2023

    • ctf

      Public
      Epreuves de sélection de la TeamFR pour l'ECSC 2019.
      Python
      •
      GNU General Public License v3.0
      •14•158•2•3•Updated May 1, 2023May 1, 2023

    • ASCAD

      Public
      Side Channels Analysis and Deep Learning
      Python
      •
      Other
      •60•175•9•1•Updated Mar 13, 2023Mar 13, 2023

    • ultrablue

      Public
      User-friendly Lightweight TPM Remote Attestation over Bluetooth
      Kotlin
      •
      Apache License 2.0
      •10•163•10•8•Updated Mar 6, 2023Mar 6, 2023