Pinned Loading

1. dmarc-digest dmarc-digest Public

   Turn DMARC aggregate (RUA) XML reports into a readable digest: who sends as your domain, who is spoofing it, and what to fix. Zero-dependency Go CLI.

   Go

2. certwatch certwatch Public

   Fast TLS certificate & configuration grader for your terminal and CI — expiry, chain trust, protocol/cipher, A–F grade.

   Python

3. evtx-triage evtx-triage Public

   Offline Windows .evtx triage for incident responders: brute-force bursts, cleared logs, rogue services, admin-group changes, suspicious PowerShell. .NET 10, cross-platform.

   C#

4. sshield sshield Public

   SSH hardening auditor: grades sshd_config and authorized_keys like certwatch grades TLS. Weak keys, weak crypto, dangerous defaults. C11, zero dependencies.

   C

5. Glyph-SH/msp-scripts Glyph-SH/msp-scripts Public

   Production-ready PowerShell, Bash, and Python scripts for MSPs and system administrators

   PowerShell

6. histscrub histscrub Public

   Local-machine secret sweep for macOS: scans shell/REPL histories and ad-hoc credential files for leaked tokens. Redacted findings. Swift 6, zero dependencies.

   Swift