Helping defenders learn and validate npm supply-chain detections with safe atomic tests.
☆35Oct 30, 2025Updated 11 months ago
Alternatives and similar repositories for NPM-Threat-Emulation
Users that are interested in NPM-Threat-Emulation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 7 months ago
- surface-watch monitors the authorized external attack surface of an organization over time☆55May 11, 2026Updated 4 months ago
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆323May 14, 2026Updated 4 months ago
- how to strangle threats☆67Sep 28, 2026Updated last week
- Finding ClickFix and FakeCAPTCHA like it's 1999☆159Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Ludus range for the Constructing Defense Lab☆139Jul 28, 2026Updated 2 months ago
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated 2 years ago
- Track C2 servers, tools, and botnets over time by framework and location☆16Aug 17, 2025Updated last year
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆74Jun 17, 2026Updated 3 months ago
- For testing or trolling LLM based pentesting frameworks.☆20Feb 18, 2026Updated 7 months ago
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆372Sep 8, 2026Updated 3 weeks ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 9 months ago
- Slides and resources from MCTTP 2025 Talk☆70Oct 26, 2025Updated 11 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A collection of CVEs weaponized by ransomware operators☆153Aug 30, 2026Updated last month
- Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025☆38Nov 22, 2025Updated 10 months ago
- ☆18Feb 17, 2025Updated last year
- Utility tool to ingest CSV files into Kusto☆21Dec 17, 2025Updated 9 months ago
- Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.☆15Feb 29, 2024Updated 2 years ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆16Updated this week
- Detect phantom IAM users, decode leaked AWS Bedrock and Claude Platform API keys, and prevent LLMjacking. CLI + SCPs + SIEM detection rul…☆36Aug 5, 2026Updated 2 months ago
- ☆16Apr 16, 2017Updated 9 years ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆495Jun 16, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Lists of independent cybersecurity blogs covering threat intelligence, purple team, red team, threat hunting, and detection engineering. …☆43Sep 15, 2026Updated 2 weeks ago
- An AWS IAM Privilege Escalation Path Library☆156Sep 18, 2026Updated 2 weeks ago
- Security Operations Chef☆109Jan 18, 2026Updated 8 months ago
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- Venture: Cross-Platform GUI tool for parsing and analyzing Windows event logs☆96Jan 23, 2025Updated last year
- ☆33Aug 22, 2026Updated last month
- Config files for my GitHub profile.☆14May 7, 2023Updated 3 years ago
- yaa - yaml search for humans☆12Dec 8, 2025Updated 9 months ago
- Common framework for designing a detection and response framework for the most common MFT solutions☆16Aug 4, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Code canaries to quickly triage hallucinated ('slop') vulnerability reports☆100May 20, 2026Updated 4 months ago
- 🛡️ SIGMA Detection Engineering Platform A comprehensive AI-powered detection engineering platform for security teams to explore MITRE AT…☆46Jun 28, 2025Updated last year
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆273Updated this week
- A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.☆27Mar 20, 2025Updated last year
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆62Sep 28, 2026Updated last week
- ☆14Mar 9, 2023Updated 3 years ago
- AWS X-Ray for Covert Command & Control☆51Oct 13, 2025Updated 11 months ago