Alternatives and similar repositories for FarsightAD:

Users that are interested in FarsightAD are comparing it to the libraries listed below

• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• 0xe7 / WonkaVision
  ☆82Updated 2 years ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆152Updated last year
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆65Updated 3 months ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆92Updated 2 years ago
• TH3xACE / EDR-Test
  Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
  ☆149Updated last year
• LuemmelSec / Custom-BloodHound-Queries
  ☆177Updated 3 months ago
• improsec / ImproHound
  Identify the attack paths in BloodHound breaking your AD tiering
  ☆317Updated 2 years ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆81Updated 10 months ago
• doredry / TokenFinder
  Tool to extract powerful tokens from Office desktop apps memory
  ☆71Updated last year
• roobixx / EventLogForRedTeams
  Simple PoC from Malicious Payload Injection from Windows Event Log Entry
  ☆27Updated 2 years ago
• LaresLLC / SysmonConfigPusher
  Pushes Sysmon Configs
  ☆88Updated 3 years ago
• Semperis / GoldenGMSA
  GolenGMSA tool for working with GMSA passwords
  ☆139Updated 11 months ago
• secureworks / TokenMan
  ☆100Updated 2 years ago
• zeronetworks / ldapfw
  Protect your Domain Controllers by auditing and restricting LDAP requests
  ☆151Updated 2 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆76Updated 6 months ago
• csandker / Azure-AccessPermissions
  ☆108Updated 2 years ago
• Qazeer / InfoSec-Notes
  InfoSec Notes
  ☆56Updated 11 months ago
• Blumira / Kerberoast-Detection
  Kerberoast Detection Script
  ☆30Updated 4 months ago
• nettitude / MalSCCM
  ☆246Updated last year
• ACE-Responder / ace-proctree
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Updated 2 years ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆73Updated last year
• darkoperator / Veil-PowerView
  Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.
  ☆55Updated 10 years ago
• daem0nc0re / Abusing_Weak_ACL_on_Certificate_Templates
  Investigation about ACL abusing for Active Directory Certificate Services (AD CS)
  ☆121Updated 3 years ago
• CrowdStrike / OWASSRF
  ☆13Updated 2 years ago
• absolomb / FindMeAccess
  ☆83Updated this week
• olafhartong / DefenderHarvester
  Expose a lot of MDE telemetry that is not easily accessible in any searchable form
  ☆105Updated 3 months ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆43Updated last year
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆76Updated last year
• rvrsh3ll / Azure-App-Tools
  Collection of tools to use with Azure Applications
  ☆109Updated last year