Res260 / conti_202202_leak_procedures
This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.
☆87Updated 3 years ago
Alternatives and similar repositories for conti_202202_leak_procedures:
Users that are interested in conti_202202_leak_procedures are comparing it to the libraries listed below
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆93Updated last year
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Updated 3 years ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆60Updated 2 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop☆68Updated this week
- Simple PowerShell script to enable process scanning with Yara.☆93Updated 2 years ago
- Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].☆150Updated 2 years ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated last year
- PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.☆70Updated 4 months ago
- Pushes Sysmon Configs☆88Updated 3 years ago
- Tool to extract powerful tokens from Office desktop apps memory☆71Updated last year
- Active C&C Detector☆154Updated last year
- Yara Rules for Modern Malware☆77Updated last year
- ☆47Updated 3 weeks ago
- ☆24Updated 2 years ago
- ☆63Updated 3 years ago
- Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.☆57Updated 10 years ago
- A list of RMMs designed to be used in automation to build alerts☆110Updated 3 weeks ago
- GoldenSAML Attack Libraries and Framework☆73Updated 11 months ago
- A repo to support the book☆108Updated 3 years ago
- Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org☆121Updated 2 years ago
- Default Detections for EDR☆96Updated last year
- Create a cool process tree like https://twitter.com/ACEResponder.☆35Updated 2 years ago
- A collection of tools to interact with Microsoft Security Response Center API☆97Updated last year
- ☆55Updated last year
- ☆82Updated 2 years ago
- ☆33Updated last year
- This repo is where I store my Threat Hunting ideas/content☆87Updated 2 years ago
- A home for detection content developed by the delivr.to team☆69Updated 3 months ago
- ☆100Updated 2 years ago