Alternatives and similar repositories for Research:

Users that are interested in Research are comparing it to the libraries listed below

• rootsecdev / Presentations
  Presentations from Conferences
  ☆26Updated 5 months ago
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆103Updated 2 months ago
• secureworks / primary-refresh-token-viewer
  ☆11Updated 2 years ago
• mr-r3b00t / KQL
  This is for my crappy (but hopefully useful) MDE and Sentinel KQL queries! #KQLThePlanet
  ☆10Updated last year
• improsec / 2Cloudz
  ☆22Updated 2 years ago
• FuzzySecurity / SANS-HackFest-2023
  ☆49Updated last year
• DebugPrivilege / OpenProject
  A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …
  ☆27Updated 3 months ago
• techspence / Locksmith
  A tool to identify and remediate common misconfigurations in Active Directory Certificate Services
  ☆15Updated last year
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆36Updated 3 months ago
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆49Updated last year
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆25Updated last year
• sap8899 / Group3rExplorer
  Fun GUI for Group3rs output log
  ☆37Updated last year
• GabrielDuschl / Automated-CME-Password-Spraying
  A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…
  ☆14Updated last year
• nicolonsky / AzureAiTMFunction
  Azure AiTM Function PoC to phish Entra ID Credentials
  ☆20Updated 4 months ago
• techspence / BadShares
  A tool to create randomly insecure file shares that also contain unsecured credential files
  ☆31Updated 9 months ago
• bouj33boy / Domain-Persistence-Detection-Triage-and-Recovery-SO-CON-2024
  Resources Links for the Research Based on Josh Prager and Nico Shyne's
  ☆13Updated 3 months ago
• microsoft / MSEntraIDProtectionGuidance
  MS Entra ID Protection Guidance
  ☆20Updated 10 months ago
• secgroundzero / KQL_Reference_Manual
  ☆40Updated 3 years ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆25Updated 9 months ago
• zh54321 / EntraTokenAid
  A pure PowerShell solution for Entra OAuth authentication, enabling easy retrieval of access and refresh tokens
  ☆80Updated this week
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆46Updated last month
• SecurityAura / Aura-Research
  Repo that hold write-ups of various research projects I did and/or overall InfoSec things I investigated/researched.
  ☆19Updated last month
• techBrandon / CAPs
  Scripts to enumerate and report on Entra Conditional Access
  ☆21Updated 5 months ago
• redcanaryco / ansible-atomic-red-team
  This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam
  ☆25Updated 7 months ago
• LearningKijo / ResearchDev
  ResearchDev - XDR & SIEM Detection
  ☆63Updated last month
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆33Updated 3 weeks ago
• 0xAnalyst / DefenderATPQueries
  Hunting Queries for Defender ATP
  ☆79Updated 2 months ago
• ASOT-LABS / TeamsBreaker
  ☆44Updated last year