I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security across network monitoring, endpoint security, SIEM engineering, threat hunting, and cloud defense
☆15Oct 17, 2026Updated this week
Alternatives and similar repositories for Cyber-Defense-Lab-Portfolio
Users that are interested in Cyber-Defense-Lab-Portfolio are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆37Updated this week
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆37Oct 7, 2026Updated 2 weeks ago
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 2 months ago
- Python scripts that helps in the development of PPKG binaries☆14Jul 31, 2026Updated 2 months ago
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆16Sep 21, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A wrapper script for https://sploitus.com to scrape query results for tools and exploits☆15Mar 3, 2019Updated 7 years ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆42Oct 1, 2026Updated 2 weeks ago
- A tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆19Jan 13, 2024Updated 2 years ago
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆28Sep 3, 2026Updated last month
- ☆16Nov 23, 2019Updated 6 years ago
- NATSSL: Zero-Configuration Distributed TLS for Private Infrastructure☆13Jun 20, 2026Updated 4 months ago
- Claude Code mods that fix and translate your prompts before Claude reads them☆13Oct 6, 2026Updated 2 weeks ago
- Off-grid, telemetry based group tracking app utilizing MeshCore. Focused on Hunting and backcountry applications.☆21Updated this week
- [gravinet] is a self-forming full-mesh, encrypted overlay VPN with a distributed control plane and relay fallback.☆11Oct 11, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆11Jan 25, 2025Updated last year
- C programs for sockets, reverse shell, shellcode execution, and process injection.☆25Dec 10, 2025Updated 10 months ago
- Browse and diff ETW provider snapshots across Windows builds. Backed by ETWInspector.☆39Sep 9, 2026Updated last month
- ☆22Aug 16, 2025Updated last year
- IoCs and YARA rules from Threatray's Threat Research☆23Updated this week
- Read-only Windows host hardening auditor in PowerShell with optional AI analysis☆19Updated this week
- Crafted with Python and Selenium wizardry, this script elegantly bypasses Queue-it captchas, swiftly fetching event identifiers.☆21Nov 10, 2023Updated 2 years ago
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆88Jul 20, 2026Updated 3 months ago
- ☆14Aug 24, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Generator of docker-compose file to allow secure configurations and multi-deployment strategy.☆12Nov 7, 2023Updated 2 years ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- General Content☆28Jul 28, 2026Updated 2 months ago
- Process Hollowing POC written in C#☆13Sep 9, 2022Updated 4 years ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆28Aug 26, 2026Updated last month
- Automated multi-tenant provisioning for Wazuh SIEM☆17Jun 24, 2026Updated 3 months ago
- Prometheus exporter that detects unused metrics and labels by scanning Grafana dashboards and alert rules☆25Oct 15, 2026Updated last week
- ☆12Jan 27, 2024Updated 2 years ago
- Meshtastic device firmware only compiled for t-deck with newer gui. no changes are made by me just compiling the TFT-GUI-WORK branch☆16Mar 13, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A clean, fast SQL editor for the desktop. PostgreSQL, MySQL/MariaDB and SQLite — locally or through an SSH tunnel.☆29Aug 30, 2026Updated last month
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆57Sep 25, 2026Updated 3 weeks ago
- Free Windows privilege escalation lab inspired by HTB Devel, built for PNPT and OSCP practice.☆25Jan 13, 2026Updated 9 months ago
- Explore the GOAD Active Directory lab in 5 minutes with Adalanche☆44Jan 10, 2025Updated last year
- Saltstack formula for wireguard☆11Dec 22, 2025Updated 10 months ago
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆11May 17, 2024Updated 2 years ago
- AI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and m…☆29Sep 18, 2026Updated last month