toolbox

Miscelaneous useful scripts for my day to day projects

post.py

Tool to generate JSON/REST queries to a web service

getawslog.py

Tool to grab events from AWS CloudTrail to a local file

getgithublog.py

Tool to grab events from GitHub security logs to a local file or Syslog

xip.py

Tool to execute a command against subnets or ranges of IP addresses

deobfuscate_chr.py

Script to de-obfuscate VBA macro from malicious OLE documents.

isc-iprepuration.py

Script to collect IP reputation data from the ISC API. See https://isc.sans.edu/api/ The tool can be invoked from the command line or from an OSSEC Active-Response entry.

webcat.py

Categorize URLs

mof.py

Extracts IOC's from MISP and generates a OSSEC rootcheck compatible file