Welcome to Project KillChain, a comprehensive GitHub repository for Red and Blue Teams. This repository houses tools, scripts, techniques, and Indicators of Compromise (IOCs) aiding in cybersecurity operations. It facilitates penetration testing, incident response, digital forensics, and threat hunting.
☆115Aug 17, 2024Updated 2 years ago
Alternatives and similar repositories for project-killchain
Users that are interested in project-killchain are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs☆54Jul 20, 2023Updated 3 years ago
- Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe☆13Dec 11, 2023Updated 2 years ago
- This is a simulation of attack by the Cozy Bear group (APT-29) targeting diplomatic missions☆48Jun 12, 2024Updated 2 years ago
- WatchTower - A platform to save your valuable time while staying updated in the Cyber realm.☆18Jun 13, 2026Updated 4 months ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automating simple report creating of threat intelligence using ChatGPT and Greynoise API.☆10Oct 3, 2023Updated 3 years ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆58Dec 5, 2024Updated last year
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆121Oct 29, 2024Updated last year
- ☆16Aug 27, 2022Updated 4 years ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Aug 23, 2022Updated 4 years ago
- Windows Thread Pool Injection Havoc Implementation☆35Mar 23, 2024Updated 2 years ago
- On-Premises Open Cyber Threat Intelligence Platform☆11Oct 29, 2024Updated last year
- ☆22Jan 31, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…☆15May 30, 2026Updated 4 months ago
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated 2 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆14Apr 10, 2024Updated 2 years ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆29Aug 25, 2022Updated 4 years ago
- Threat Hunt Investigation Methodology and Procedure☆15Jul 11, 2022Updated 4 years ago
- This Repository consists all Public Cheatsheets created by BlackPerl DFIR Content Team☆20Oct 9, 2024Updated 2 years ago
- Fast program tracing and analysis☆18Jul 20, 2026Updated 2 months ago
- Packet Analysis on Steroids☆14Oct 20, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Azure function to insert MISP data in to Azure Sentinel☆34Oct 19, 2022Updated 3 years ago
- PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection…☆747Aug 22, 2026Updated last month
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆98May 28, 2023Updated 3 years ago
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Mar 25, 2024Updated 2 years ago
- List of custom developed KQL queries to help proactive security teams hunt for opportunistic and sophisticated threat activity by develop…☆27Jun 30, 2021Updated 5 years ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 4 months ago
- An opensource sigma conversion tool built using pysigma☆175Oct 5, 2026Updated last week
- ☆17Jul 13, 2022Updated 4 years ago
- PowerShell Digital Forensics & Incident Response Scripts.☆821May 26, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- MISP Playbooks☆236Oct 14, 2025Updated 11 months ago
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆205Aug 11, 2026Updated 2 months ago
- An offline Phishing Email Analyzer. Enabling non-techies to analyze phishing emails automatically!☆62Oct 28, 2023Updated 2 years ago
- Open IOC sharing platform☆69Jan 1, 2026Updated 9 months ago
- ☆16Jun 28, 2025Updated last year
- ☆43May 22, 2021Updated 5 years ago
- ☆46Apr 10, 2024Updated 2 years ago