0x783kb / Security-Operation-Book
常见的攻击行为监测特征及方法,涵盖端点和流量,未包含PowerShell和Sysmon。预祝运营生活愉快!
☆622Updated 8 months ago
Alternatives and similar repositories for Security-Operation-Book
Users that are interested in Security-Operation-Book are comparing it to the libraries listed below
Sorting:
- BCS(北京网络安全大会)2019 红队行动会议重点内容☆821Updated 5 years ago
- ATT&CK实操☆370Updated 5 years ago
- 戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑☆511Updated last year
- 威胁情报播报☆386Updated last week
- Red-Team Attack Guid☆259Updated 4 years ago
- 通过jsp脚本扫描java web Filter/Servlet型内存马☆897Updated 2 years ago
- Oscp study group☆342Updated 3 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,209Updated 3 years ago
- Suricata IDS rules 用来检测红队渗透/恶意行为等,支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等☆1,203Updated last year
- 破解的cs4.0、cs4.0官方手册翻译和一些笔记☆401Updated 5 years ago
- 红队基础设施自动化部署工具☆842Updated 2 years ago
- ☆407Updated last year
- ☆460Updated last year
- Bypass firewall for traffic forwarding using webshell☆1,402Updated 3 years ago
- 检测绝大部分所谓的内存免杀马☆718Updated 2 years ago
- A flexible scanner☆1,247Updated 2 months ago
- 用于记录内网渗透(域渗透)学习 :-)☆1,171Updated 4 years ago
- 蓝队应急工具☆498Updated 11 months ago
- 恶意代码逃逸源代码 http://payloads.online☆747Updated 3 years ago
- 🔥火麒麟-网络安全应急响应工具(系统痕迹采集)Cybersecurity emergency response tool.👍👍👍☆787Updated 3 years ago
- emergency response toolkit☆259Updated 4 years ago
- 一款可以检测WEB蜜罐并阻断请求的Chrome插件☆854Updated 9 months ago
- Glass是一款针对资产列表的快速指纹识别工具,通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹,也可针对IP/IP段或资产列表进行快速的指纹识别。☆994Updated 3 years ago
- Collect JSP webshell of various implementation methods. 收 集JSP Webshell的各种姿势☆1,382Updated 3 years ago
- 红方人员作战执行手册☆290Updated 5 years ago
- 红方人员作战执行手册☆438Updated 5 years ago
- 中国蚁剑后渗透框架☆921Updated last year
- POC&EXP仓库、hvv弹药库、Nday、1day☆1,045Updated 2 years ago
- 2021hvv漏洞汇总☆671Updated 4 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具,它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆917Updated 9 months ago