RomanEmelyanov / CobaltStrikeForensicLinks
Toolset for research malware and Cobalt Strike beacons
☆211Updated 6 months ago
Alternatives and similar repositories for CobaltStrikeForensic
Users that are interested in CobaltStrikeForensic are comparing it to the libraries listed below
Sorting:
- Static based decoders for malware samples☆94Updated 5 years ago
- Splunk Dashboard for CobaltStrike logs☆89Updated 4 years ago
- DLL Password Filter Implant with Exfiltration Capabilities☆138Updated 5 years ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆121Updated 6 years ago
- Ex-pv8's☆64Updated 6 years ago
- Community maintained list of most popular HIPS service and process names on a Windows Platform.☆43Updated 3 years ago
- Simulating Adversary Operations☆96Updated 7 years ago
- Aggregation of Cobalt Strike's aggressor scripts.☆142Updated 7 years ago
- A collection of scripts for dealing with Cobalt Strike beacons in Python☆168Updated 4 years ago
- A tool for detecting VBA stomping.☆100Updated 3 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Updated 6 years ago
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆141Updated 7 years ago
- ☆82Updated 4 years ago
- Constrained Language Mode + AMSI bypass all in one☆160Updated 6 years ago
- ☆172Updated 7 years ago
- ☆94Updated 6 years ago
- CobaltStrike External C2 for Websockets☆197Updated 6 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆113Updated 5 years ago
- Python api for usage with cobalt strike's External C2 specification☆242Updated 2 years ago
- Slides from my talk in "Hackinparis" 2019 edition☆91Updated 6 years ago
- Petaq - Purple Team Command & Control Server☆105Updated 2 years ago
- APT34/OILRIG leak☆233Updated 6 years ago
- An Insider Threat Toolkit☆153Updated 6 years ago
- PowerAvails is a unit of collection of Powershell modules that help you get done many things☆118Updated 6 years ago
- PowerShell script for hunting webshells on Microsoft Exchange Servers.☆56Updated 8 years ago
- Exercises for C# Workshop at Wild West Hackin' Fest 2018 & 2019.☆64Updated 5 years ago
- CACTUSTORCH: Payload Generation for Adversary Simulations☆76Updated 7 years ago
- A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.☆172Updated 7 months ago
- ☆229Updated 7 years ago
- lateral movement techniques that can be used during red team exercises☆272Updated 5 years ago