NextronSystems / ransomware-simulator
Ransomware simulator written in Golang
☆427Updated 2 years ago
Alternatives and similar repositories for ransomware-simulator:
Users that are interested in ransomware-simulator are comparing it to the libraries listed below
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆704Updated last month
- ☆514Updated 5 months ago
- ☆539Updated last year
- Automatically created C2 Feeds☆591Updated this week
- Set of EVTX samples (>270) mapped to MITRE ATT&CK tactic and techniques to measure your SIEM coverage or developed new use cases.☆557Updated 2 months ago
- Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-Cradle…☆300Updated 3 years ago
- PowerShell Ransomware Simulator with C2 Server☆476Updated last year
- A repository of DFIR-related Mind Maps geared towards the visual learners!☆516Updated 2 years ago
- Awesome list of keywords and artifacts for Threat Hunting sessions☆553Updated 3 weeks ago
- Set of SIGMA rules (>350) mapped to MITRE ATT&CK tactic and techniques☆352Updated 2 months ago
- MAL-CL (Malicious Command-Line)☆310Updated 2 years ago
- Collection of Event ID ressources useful for Digital Forensics and Incident Response☆609Updated 9 months ago
- ☆195Updated last year
- Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.☆457Updated 8 months ago
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆201Updated 2 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆717Updated last week
- Signatures and IoCs from public Volexity blog posts.☆350Updated last month
- Purple Team Exercise Framework☆684Updated last year
- a tool to help operate in EDRs' blind spots☆722Updated 3 months ago
- Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detection…☆843Updated 3 years ago
- PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.☆315Updated 5 months ago
- A centralized and enhanced memory analysis platform☆434Updated last month
- MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).☆378Updated 5 months ago
- An open-source self-hosted purple team management web application.☆264Updated 2 weeks ago
- Incident Response collection and processing scripts with automated reporting scripts☆291Updated 9 months ago
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆290Updated 3 years ago
- Scan installed EDRs and AVs on Windows☆580Updated last year
- Invoke-AtomicRedTeam is a PowerShell module to execute tests as defined in the [atomics folder](https://github.com/redcanaryco/atomic-red…☆890Updated 3 weeks ago
- Rules generated from our investigations.☆192Updated this week
- Threat Hunting tool about Sysmon and graphs☆330Updated last year