NVISOsecurity / SEC599-Resources
☆21Updated last year
Related projects ⓘ
Alternatives and complementary repositories for SEC599-Resources
- Active Directory Purple Team Playbook☆104Updated last year
- Full of public notes and Utilities☆86Updated this week
- ☆52Updated last year
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆109Updated last year
- This repo is where I store my Threat Hunting ideas/content☆85Updated last year
- A repository to share publicly available Velociraptor detection content☆119Updated this week
- Notes on responding to security breaches relating to Azure AD☆96Updated 2 years ago
- Conference presentations☆47Updated last year
- MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity☆86Updated 3 years ago
- A PowerShell incident response script for quick triage☆75Updated 2 years ago
- A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation☆75Updated 6 months ago
- Repository of public reference frameworks for the DFIR community.☆109Updated last year
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆109Updated 11 months ago
- This guide describes a process for developing Cyber Threat Intelligence Priority Intelligence Requirements☆116Updated 11 months ago
- Repository of attack and defensive information for Business Email Compromise investigations☆230Updated 2 months ago
- My Jupyter Notebooks☆36Updated 7 months ago
- ☆1Updated 3 weeks ago
- The Github project for The Defender's Guide by Luke Paine and Jonathan Johnson☆145Updated last year
- Detection of obfuscated Powershell commands☆54Updated last year
- User Feedback Space of #MitreAssistant☆37Updated last year
- A collection of Powershell scripts that will help automate the build process for a Marvel domain.☆144Updated 8 months ago
- ☆41Updated 6 months ago
- ☆28Updated 4 years ago
- ☆77Updated 5 years ago
- Dettectinator - The Python library to your DeTT&CT YAML files.☆104Updated 2 weeks ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆125Updated 2 years ago
- ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…☆72Updated 2 weeks ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆139Updated this week
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆49Updated last year
- Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE…☆81Updated last month