DidierStevens / FalsePositivesLinks
Tools that trigger False Positive AV alerts
☆53Updated 11 months ago
Alternatives and similar repositories for FalsePositives
Users that are interested in FalsePositives are comparing it to the libraries listed below
Sorting:
- MITRE TTPs derived from Conti's leaked playbooks from XSS.IS☆39Updated 4 years ago
- Tools for offensive security of NetBackup infrastructures☆42Updated 2 years ago
- aggregated repo for all conferences and talks I am giving☆17Updated 4 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆70Updated 3 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- C# User Simulation☆33Updated 3 years ago
- Python tool to find vulnerable AD object and generating csv report☆14Updated 3 years ago
- Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...☆29Updated 2 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆74Updated 3 years ago
- ☆59Updated 2 years ago
- Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…☆21Updated this week
- Triaging Windows event logs based on SANS Poster☆42Updated 2 weeks ago
- Slides from my talk at the Adversary Village, Defcon 30☆29Updated 3 years ago
- Yara Rules for Modern Malware☆78Updated last year
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆62Updated last year
- A fast wordlist to nthash converter☆21Updated 4 years ago
- ☆49Updated 2 years ago
- Dump objects from .NET dumps.☆51Updated 3 years ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆44Updated last year
- Continuous kerberoast monitor☆45Updated 2 years ago
- ☆27Updated 3 years ago
- ☆26Updated 3 years ago
- The repository accompanying the Buer Emulation workshop☆23Updated 4 years ago
- Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.☆50Updated 2 years ago
- ☆24Updated last year
- A powershell parser for https://github.com/ufrisk/MemProcFS☆44Updated 4 years ago
- Imphash-like calculation on Golang binaries☆49Updated 3 years ago
- Lazarus analysis tools and research report☆57Updated last year
- Python tool to find vulnerable AD object and generating csv report☆26Updated 3 years ago
- This repo hosts a poc of how to execute F# code within an unmanaged process☆70Updated last year