NextronSystems / ransomware-simulator
Ransomware simulator written in Golang
☆433Updated 2 years ago
Alternatives and similar repositories for ransomware-simulator:
Users that are interested in ransomware-simulator are comparing it to the libraries listed below
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆707Updated last week
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆561Updated 3 months ago
- ☆544Updated last year
- ☆515Updated 6 months ago
- MAL-CL (Malicious Command-Line)☆311Updated 2 years ago
- Automatically created C2 Feeds☆595Updated this week
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆518Updated 2 years ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆356Updated 3 months ago
- Incident Response collection and processing scripts with automated reporting scripts☆296Updated 9 months ago
- PowerShell Ransomware Simulator with C2 Server☆477Updated last year
- Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…☆301Updated 3 years ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆847Updated 3 years ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆611Updated 9 months ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆559Updated last month
- Threat Hunting tool about Sysmon and graphs☆331Updated last year
- Rules generated from our investigations.☆194Updated 3 weeks ago
- PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monit…☆799Updated 4 months ago
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆295Updated 3 years ago
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆459Updated 9 months ago
- a tool to help operate in EDRs' blind spots☆727Updated 4 months ago
- MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).☆394Updated 6 months ago
- Documentation and scripts to properly enable Windows event logs.☆601Updated last year
- Detect and respond to Cobalt Strike beacons using ETW.☆489Updated 2 years ago
- Bloodhound Reporting for Blue and Purple Teams☆1,173Updated last month
- Signatures and IoCs from public Volexity blog posts.☆352Updated 2 months ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆201Updated 2 years ago
- Sysmon configuration file template with default high-quality event tracing☆481Updated last year
- Scan installed EDRs and AVs on Windows☆582Updated last year
- Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.☆647Updated last year
- ☆195Updated last year