Welcome to Project KillChain, a comprehensive GitHub repository for Red and Blue Teams. This repository houses tools, scripts, techniques, and Indicators of Compromise (IOCs) aiding in cybersecurity operations. It facilitates penetration testing, incident response, digital forensics, and threat hunting.
☆114Aug 17, 2024Updated 2 years ago
Alternatives and similar repositories for project-killchain
Users that are interested in project-killchain are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆54Jul 20, 2023Updated 3 years ago
- This is a simulation of attack by the Cozy Bear group (APT-29) targeting diplomatic missions☆49Jun 12, 2024Updated 2 years ago
- WatchTower - A platform to save your valuable time while staying updated in the Cyber realm.☆18Jun 13, 2026Updated 4 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆17Jun 19, 2026Updated 4 months ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Azure function to insert MISP data in to Azure Sentinel☆34Oct 19, 2022Updated 4 years ago
- Automating simple report creating of threat intelligence using ChatGPT and Greynoise API.☆10Oct 3, 2023Updated 3 years ago
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆123Oct 29, 2024Updated 2 years ago
- Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe☆13Dec 11, 2023Updated 2 years ago
- eml metadata parser.☆17Jan 24, 2023Updated 3 years ago
- Apple mDNS Cache Pressure Tool☆17Apr 11, 2026Updated 6 months ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…☆46May 6, 2026Updated 5 months ago
- My stuff regarding Copilot for Security☆13Jan 12, 2026Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Instagram User Searcher (Osint) 🔍☆13Aug 20, 2024Updated 2 years ago
- ☆17Aug 27, 2022Updated 4 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆58Dec 5, 2024Updated last year
- Resources for DFIR Professionals Responding to the Whispergate☆10Jan 17, 2022Updated 4 years ago
- A collection of Microsoft Sentinel workbooks and analytics rules.☆111Feb 8, 2024Updated 2 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- This Repository gives the best and possible strategies against hunting the ransomware☆26Aug 23, 2022Updated 4 years ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆15Apr 10, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated 2 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆29Aug 25, 2022Updated 4 years ago
- ☆57Aug 13, 2026Updated 2 months ago
- This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team☆20Oct 9, 2024Updated 2 years ago
- ☆23Jan 31, 2023Updated 3 years ago
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Mar 25, 2024Updated 2 years ago
- This repository contains various public projects created by the owners of Hybrid Brothers☆21Nov 3, 2023Updated 2 years ago
- Visual exploration of OSINT data for investigative cases: people, phones, social profiles, vehicles and places as an interactive local gr…☆15Oct 7, 2026Updated 3 weeks ago
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…☆15May 30, 2026Updated 5 months ago
- ☆65Sep 1, 2023Updated 3 years ago
- Contains Actual Events and Codes of Threat Groups, APTs, Research Groups☆20Sep 10, 2022Updated 4 years ago
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 5 months ago
- Quick analysis focusing on most important of a Malware or a Threat☆40Sep 4, 2023Updated 3 years ago
- An offline Phishing Email Analyzer. Enabling non-techies to analyze phishing emails automatically!☆62Oct 28, 2023Updated 3 years ago