RomanEmelyanov / CobaltStrikeForensicLinks
Toolset for research malware and Cobalt Strike beacons
☆211Updated 10 months ago
Alternatives and similar repositories for CobaltStrikeForensic
Users that are interested in CobaltStrikeForensic are comparing it to the libraries listed below
Sorting:
- Static based decoders for malware samples☆94Updated 5 years ago
- Splunk Dashboard for CobaltStrike logs☆90Updated 4 years ago
- Simulating Adversary Operations☆97Updated 7 years ago
- Ex-pv8's☆64Updated 6 years ago
- Community maintained list of most popular HIPS service and process names on a Windows Platform.☆42Updated last week
- DLL Password Filter Implant with Exfiltration Capabilities☆138Updated 5 years ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆120Updated 6 years ago
- Aggregation of Cobalt Strike's aggressor scripts.☆142Updated 7 years ago
- A collection of scripts for dealing with Cobalt Strike beacons in Python☆169Updated 5 years ago
- ☆82Updated 5 years ago
- A tool for detecting VBA stomping.☆101Updated 3 years ago
- A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.☆173Updated 11 months ago
- Detect possible sysmon logging bypasses given a specific configuration☆111Updated 7 years ago
- CobaltStrike External C2 for Websockets☆197Updated 6 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆48Updated 7 years ago
- ☆95Updated 7 years ago
- Constrained Language Mode + AMSI bypass all in one☆159Updated 6 years ago
- ☆230Updated 7 years ago
- ☆83Updated 8 years ago
- PowerShell script for hunting webshells on Microsoft Exchange Servers.☆56Updated 8 years ago
- APT || Execution || Launch || APTs || ( Authors harr0ey, bohops )☆110Updated 7 years ago
- Automated Tactics Techniques & Procedures☆260Updated 2 years ago
- Powershell script for enumerating vulnerable DCOM Applications☆266Updated 7 years ago
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆140Updated 7 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆73Updated 4 years ago
- Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality☆83Updated 2 years ago
- An Insider Threat Toolkit☆155Updated 7 years ago
- Windows RID Hijacking persistence technique☆177Updated last year
- Presentation material presented by Outflank team members at public events.☆192Updated 3 months ago
- ☆174Updated 7 years ago