This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in the leak and posted on may 10th, 2021 in the channel.
☆86Mar 3, 2022Updated 4 years ago
Alternatives and similar repositories for conti_202202_leak_procedures
Users that are interested in conti_202202_leak_procedures are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Leaked communication of Conti ransomware group from Jan 29, 2021 to Feb 27, 2022☆133Mar 2, 2022Updated 4 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- ☆12Jun 3, 2022Updated 4 years ago
- ☆21May 8, 2022Updated 4 years ago
- Forensics artifacts collection☆21Jun 18, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- MITRE TTPs derived from Conti's leaked playbooks from XSS.IS☆40Oct 25, 2021Updated 4 years ago
- A simple tool to inject shellcode into the remote process with the ability to spoof parent process.☆16Mar 18, 2021Updated 5 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆30Mar 2, 2021Updated 5 years ago
- Some scripts for the Arduino atmega32u4 "Rubber Ducky" USB HID.☆10Apr 16, 2019Updated 7 years ago
- This script provides a Python library with methods to authenticate to various sources of threat intelligence and query IPs for the latest…☆18Feb 16, 2025Updated last year
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- Protect your servers with a secret header☆28Jun 12, 2020Updated 6 years ago
- ☆23Sep 28, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Run PowerShell command without invoking powershell.exe☆36Nov 22, 2021Updated 4 years ago
- Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as we…☆55Apr 25, 2023Updated 3 years ago
- ☆38Nov 12, 2024Updated last year
- This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe☆37Jun 12, 2024Updated 2 years ago
- Extracts Azure authentication tokens from PowerShell process minidumps.☆25May 20, 2023Updated 3 years ago
- Create Suricata and Snort DNS signatures given a single domain or list of domains in a file.☆18Nov 13, 2017Updated 8 years ago
- Sample SecOps scripts and Utilities☆12Jun 19, 2024Updated 2 years ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆120Jan 26, 2022Updated 4 years ago
- Grab unsaved Notepad contents with a Beacon Object File☆56Jun 19, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- tool for identifying guest relationships between companies☆102Jun 27, 2024Updated 2 years ago
- High-level Threat Intelligence playbooks☆21Mar 6, 2021Updated 5 years ago
- A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365☆795Oct 29, 2022Updated 3 years ago
- Assess certain AWS network configurations☆12Aug 22, 2018Updated 8 years ago
- A tool to assist in the development of landing pages for phishing campaigns☆16Oct 3, 2022Updated 4 years ago
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago
- Dump NTDS with golden certificates and UnPAC the hash☆649Mar 20, 2024Updated 2 years ago
- C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly☆15Jul 15, 2021Updated 5 years ago
- This script is to build Wazuh 4.3 environment☆12May 30, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Finding all things on-prem Microsoft for password spraying and enumeration.☆258May 17, 2022Updated 4 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- This repo is where I store my Threat Hunting ideas/content☆90Mar 20, 2026Updated 7 months ago
- Easily serve HTTP and DNS keys for proper payload protection☆59Nov 10, 2018Updated 7 years ago
- Keep it secret, keep it safe☆77Feb 6, 2025Updated last year
- ☆27Jul 11, 2022Updated 4 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 6 years ago