A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive strategies.
☆19Feb 27, 2026Updated 8 months ago
Alternatives and similar repositories for ThreatHunting-JupyterNotebooks
Users that are interested in ThreatHunting-JupyterNotebooks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Jun 24, 2025Updated last year
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated last year
- A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …☆39Oct 1, 2025Updated last year
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- inspired by mr d0x filefix☆15Feb 4, 2026Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A stealthier approach to WMI-based command execution using Impacket without touching the disk.☆88Mar 15, 2026Updated 7 months ago
- Kerberos CNAME abuse PoC☆109Jan 27, 2026Updated 9 months ago
- Extract DPAPI CREDHIST and Masterkey hashes☆23May 28, 2026Updated 5 months ago
- A Go library to create BloodHound OpenGraphs easily☆15Jun 18, 2026Updated 4 months ago
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- One PsExec client to rule them all☆15Mar 25, 2026Updated 7 months ago
- An OpenGraph extension for secrets☆23Aug 11, 2026Updated 2 months ago
- Impersonate Windows tokens in Nim☆23Aug 4, 2025Updated last year
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 8 months ago
- Comprehensive Active Directory Enumeration tool using Netexec☆19Aug 8, 2026Updated 2 months ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆39Apr 14, 2026Updated 6 months ago
- rust port of pspy with support for process monitoring over dbus☆39Jan 4, 2026Updated 9 months ago
- ADAttributeHound is an OpenGraph extension for BloodHound that exports Active Directory custom attributes as node properties.☆24Jun 18, 2026Updated 4 months ago
- In this repository, I will store my scripts that I create to automate some processes during some Reverse Engineering tasks. Some scripts…☆14Oct 18, 2026Updated last week
- AppLocker Policy Generator☆27Aug 25, 2025Updated last year
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆46Mar 27, 2026Updated 7 months ago
- Detailed installation and configuration instructions for deploying Suricata and Zeek as Intrusion Detection and Prevention Systems. Inclu…☆12Jul 29, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆21Mar 3, 2026Updated 7 months ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Extracting AsyncRAT configuration using CyberChef☆14May 4, 2022Updated 4 years ago
- ☆14Mar 9, 2023Updated 3 years ago
- Zeek Profinet I/O Context Manager Parser - CISA ICSNPP☆14Oct 20, 2026Updated last week
- A vibe-coded port of wiretap☆37Apr 25, 2026Updated 6 months ago
- It’s just a reflektor☆36Oct 17, 2026Updated last week
- Shellph is a portable command-line utility designed to automate encryption and obfuscation of arbitrary shellcode. Named after my cat (Be…☆36Jul 20, 2026Updated 3 months ago
- Collection of cybersecurity testing tools for Modbus.☆19Apr 25, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Machine Learning course project to convert a source voice into a target voice.☆13May 26, 2018Updated 8 years ago
- Determine if the WebClient Service (WebDAV) is running on a remote system☆21Nov 28, 2025Updated 11 months ago
- mod to myaut2exe decompiler☆20Jul 28, 2017Updated 9 years ago
- A community-driven collection of BloodHound queries☆210Aug 20, 2026Updated 2 months ago
- ☆14Oct 1, 2025Updated last year
- POC to decrypt SmartDeploy encrypted credentials☆12Aug 13, 2025Updated last year
- SCADA Simulator encompassing things from PLCs to devices such as valves, pumps, tanks, etc. and environmental properties such as water pH…☆16Jun 6, 2018Updated 8 years ago