Neo23x0 / god-mode-rulesView external linksLinks
God Mode Detection Rules
☆135Aug 8, 2024Updated last year
Alternatives and similar repositories for god-mode-rules
Users that are interested in god-mode-rules are comparing it to the libraries listed below
Sorting:
- Collection of YARA signatures from individual research☆45Nov 20, 2023Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆212May 16, 2022Updated 3 years ago
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 3 years ago
- ☆11Jun 12, 2023Updated 2 years ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆167Dec 7, 2025Updated 2 months ago
- Powershell module for VMWare vSphere forensics☆158Nov 8, 2024Updated last year
- Repository of Yara Rules☆139Jan 16, 2026Updated 3 weeks ago
- This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.☆119Dec 13, 2023Updated 2 years ago
- Quick ESXi Log Parser☆28Oct 20, 2025Updated 3 months ago
- Documentation and scripts to properly enable Windows event logs.☆671Oct 3, 2025Updated 4 months ago
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆258Nov 24, 2023Updated 2 years ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆252Oct 29, 2025Updated 3 months ago
- Mapping of open-source detection rules and atomic tests.☆195Updated this week
- Forensic cheatsheets for use with cheat☆15Dec 2, 2021Updated 4 years ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,924Jan 20, 2026Updated 3 weeks ago
- An opensource sigma conversion tool built using pysigma☆158Updated this week
- Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows…☆2,048Dec 11, 2024Updated last year
- Rules Shared by the Community from 100 Days of YARA 2023☆78Apr 12, 2023Updated 2 years ago
- This is a set of tools for doing forensics analysis on Microsoft ESE databases.☆128Jan 31, 2022Updated 4 years ago
- yara detection rules for hunting with the threathunting-keywords project☆157May 11, 2025Updated 9 months ago
- FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is de…☆817Feb 17, 2025Updated 11 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆633Aug 4, 2025Updated 6 months ago
- ☆128Feb 2, 2025Updated last year
- The Threat Hunting In Rapid Iterations (THIRI) Jupyter notebook is designed as a research aide to let you rapidly prototype threat huntin…☆154Apr 25, 2022Updated 3 years ago
- Repository of public reference frameworks for the DFIR community.☆121Jul 4, 2023Updated 2 years ago
- Living Under the Land on Linux ~ Bsides Belfast/Vienna 2025☆37Nov 22, 2025Updated 2 months ago
- A C# based tool for analysing malicious OneNote documents☆118Apr 4, 2023Updated 2 years ago
- Some YARA rules i will add from time to time☆66Mar 25, 2023Updated 2 years ago
- ☆385Jan 19, 2023Updated 3 years ago
- ☆21May 8, 2022Updated 3 years ago
- Yara Rules for Modern Malware☆78Mar 3, 2024Updated last year
- ☆18Mar 26, 2024Updated last year
- UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It …☆1,238Feb 5, 2026Updated last week
- Parses USB connection artifacts from offline Registry hives☆107Updated this week
- A preconfigured Velociraptor triage collector☆74Jan 7, 2026Updated last month
- Sysmon configuration file template with default high-quality event tracing☆567Jan 21, 2026Updated 3 weeks ago
- A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …☆421Aug 10, 2025Updated 6 months ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,440Oct 12, 2025Updated 4 months ago
- CarbonBlack EDR detection rules and response actions☆73Sep 10, 2024Updated last year