Full of public notes and Utilities
☆135Jan 6, 2026Updated 9 months ago
Alternatives and similar repositories for notes
Users that are interested in notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Jul 2, 2026Updated 4 months ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- This repository contains scripts designed to streamline and simplify workflows for purple/blue/red teamers, making day-to-day operations …☆13Jul 18, 2026Updated 3 months ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago
- Jupyter notebooks for threat hunting☆62May 16, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆475Feb 18, 2026Updated 8 months ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆43Jul 18, 2022Updated 4 years ago
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 5 years ago
- ScriptSentry finds misconfigured and dangerous logon scripts.☆678Updated this week
- PowerShell tools to help defenders hunt smarter, hunt harder.☆491Oct 29, 2025Updated last year
- ☆54May 14, 2024Updated 2 years ago
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- ☆18Oct 24, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A repository to share publicly available Velociraptor detection content☆210Updated this week
- ☆23Jan 31, 2023Updated 3 years ago
- ☆273Jun 7, 2025Updated last year
- An automated deployment tool that creates instrumented Azure environments with vulnerable systems for simulating attacks and testing Micr…☆68Mar 30, 2026Updated 7 months ago
- ☆266May 9, 2024Updated 2 years ago
- A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID☆684Oct 26, 2026Updated last week
- Splunk Stuffs!☆14Oct 14, 2023Updated 3 years ago
- Cover various security approaches to attack techniques and also provides new discoveries about security breaches.☆490Apr 17, 2025Updated last year
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆18Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Hunting Malicious Macros SANS Threathunting Summit 2021 Materials☆39Oct 9, 2021Updated 5 years ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆872Jan 20, 2022Updated 4 years ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆132Dec 28, 2025Updated 10 months ago
- ShellSweeping the evil.☆185Jul 22, 2026Updated 3 months ago
- A new way for you to structure your threat content.☆11Oct 24, 2024Updated 2 years ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆35Oct 14, 2026Updated 2 weeks ago
- Parses USB connection artifacts from offline Registry hives☆109Feb 8, 2026Updated 8 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆680Aug 4, 2025Updated last year
- Port of tomchop's autoruns plugin for Volatility 3☆10Apr 27, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,999Updated this week
- ☆26Feb 18, 2025Updated last year
- Threat Hunting tool about Sysmon and graphs☆341May 28, 2023Updated 3 years ago
- ☆62Jun 24, 2023Updated 3 years ago
- A repo to centralize some of the regular expressions I've found useful over the course of my DFIR career.☆109Mar 12, 2026Updated 7 months ago
- Incident Response documents and tooling☆133Jul 22, 2026Updated 3 months ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆37May 25, 2024Updated 2 years ago