Alternatives and similar repositories for CanaryHunter

Users that are interested in CanaryHunter are comparing it to the libraries listed below

• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆65Updated 4 months ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• Semperis / SilverSamlForger
  Silver SAML forgery tool
  ☆56Updated last year
• tsale / EDR-Telemetry-Website
  ☆74Updated this week
• Neo23x0 / tiny-shells
  All kinds of tiny shells
  ☆58Updated 2 years ago
• elementalsouls / DumpLSASS
  ☆33Updated last year
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆71Updated 10 months ago
• Res260 / conti_202202_leak_procedures
  This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…
  ☆87Updated 3 years ago
• doredry / TokenFinder
  Tool to extract powerful tokens from Office desktop apps memory
  ☆71Updated last year
• sans-blue-team / DNS-Exfiltrate
  ☆26Updated 2 years ago
• DefensiveOrigins / DO-LAB
  ☆47Updated last week
• tothi / smbmap
  SMBMap is a handy SMB enumeration tool - here with Kerberos support
  ☆72Updated 3 years ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆164Updated 2 years ago
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆96Updated 3 months ago
• BC-SECURITY / Long-Live-The-Empire
  A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing…
  ☆105Updated 2 years ago
• gladstomych / AHHHZURE
  AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…
  ☆106Updated last year
• LivingInSyn / RMML
  A list of RMMs designed to be used in automation to build alerts
  ☆113Updated 6 months ago
• secureworks / PhishInSuits
  ☆116Updated 4 years ago
• LOLAD-Project / LOLAD-Project.github.io
  https://lolad-project.github.io/
  ☆81Updated 9 months ago
• nyxgeek / guestlist
  tool for identifying guest relationships between companies
  ☆103Updated last year
• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆79Updated 6 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆68Updated last year
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆126Updated last year
• SySS-Research / azurenum
  Enumerate Microsoft Entra ID (Azure AD) fast
  ☆97Updated 6 months ago
• chipmanfu / Cyber-Range
  create a "simulated internet" cyber range environment
  ☆18Updated 5 months ago
• nullenc0de / servicelens
  ServiceLens is a Python tool for analyzing services linked to Microsoft 365 domains. It scans DNS records like SPF and DMARC to identify …
  ☆78Updated last week
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆50Updated last year
• Synzack / PynAuth
  ☆40Updated 11 months ago
• Wh1t3Rh1n0 / dns-triage
  A simple Python script to do quick, targeted recon of a given domain.
  ☆51Updated 6 months ago
• HackingLZ / IndicatorOfCanary
  Canary Detection
  ☆187Updated last week