Skip to content
@invictus-ir

Invictus Incident Response

A company doing cool stuff in the ☁️ We make tools that makes incident response in the cloud easier, follow along!

Popular repositories Loading

  1. Microsoft-Extractor-Suite Microsoft-Extractor-Suite Public

    A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

    PowerShell 860 123

  2. Invictus-AWS Invictus-AWS Public

    A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.

    Python 206 19

  3. ALFA ALFA Public

    ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit …

    Python 187 30

  4. aws-cheatsheet aws-cheatsheet Public

    A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

    86 18

  5. Blue-team-app-Office-365-and-Azure Blue-team-app-Office-365-and-Azure Public

    75 12

  6. o365_dataset o365_dataset Public

    A dataset containing Office 365 Unified Audit Logs for security research and detection

    66 9

Repositories

Showing 10 of 20 repositories
  • IOCs Public

    Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more

    invictus-ir/IOCs's past year of commit activity
    31 CC-BY-4.0 2 0 0 Updated Sep 2, 2026
  • ALFA Public

    ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit logs using statistics and the MITRE ATT&CK Cloud Framework

    invictus-ir/ALFA's past year of commit activity
    Python 187 MIT 30 0 5 Updated Aug 31, 2026
  • frontier-forensics-cheatsheets Public

    Cheat sheets for doing investigations inside AI platforms.

    invictus-ir/frontier-forensics-cheatsheets's past year of commit activity
    0 MIT 0 0 0 Updated Aug 26, 2026
  • o365_dataset Public

    A dataset containing Office 365 Unified Audit Logs for security research and detection

    invictus-ir/o365_dataset's past year of commit activity
    66 CC-BY-4.0 9 0 0 Updated Aug 12, 2026
  • Invictus-AWS Public

    A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response.

    invictus-ir/Invictus-AWS's past year of commit activity
    Python 206 MIT 19 1 2 Updated Aug 11, 2026
  • Invictus-training Public

    Repository with supporting materials for Invictus Academy/Training

    invictus-ir/Invictus-training's past year of commit activity
    Shell 45 6 0 0 Updated Jul 22, 2026
  • Microsoft-Extractor-Suite Public

    A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

    invictus-ir/Microsoft-Extractor-Suite's past year of commit activity
    PowerShell 860 GPL-2.0 123 1 2 Updated Jun 29, 2026
  • KubeForenSys Public

    A Kubernetes Forensic Collection Framework for Azure Kubernetes Service

    invictus-ir/KubeForenSys's past year of commit activity
    Python 44 GPL-2.0 4 0 0 Updated Feb 9, 2026
  • Invictus-Nebius Public

    A Python script to acquire logs using the Nebius CLI

    invictus-ir/Invictus-Nebius's past year of commit activity
    Python 0 MIT 0 0 0 Updated Jan 26, 2026
  • aws-cheatsheet Public

    A cheatsheet containing AWS CloudTrail events that can be used for Incident Response purposes or Detection Engineering.

    invictus-ir/aws-cheatsheet's past year of commit activity
    86 MIT 18 0 0 Updated Jan 6, 2026

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…