SecSamDev / sysmon-arangodb

Related projects: ⓘ

• mandiant / goauditparser
  ☆42Updated last year
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆65Updated 2 years ago
• WithSecureLabs / tau-engine
  A document tagging library
  ☆29Updated last year
• 3CORESec / Automata
  Automatic detection engineering technical state compliance
  ☆49Updated 2 months ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆74Updated 2 years ago
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆72Updated 2 years ago
• MISP / evtx-toolkit
  Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream
  ☆11Updated 3 years ago
• SecurityRiskAdvisors / dredd
  Automated detection rule analysis utility
  ☆29Updated last year
• StefanKelm / yara-rules
  Links to malware-related YARA rules
  ☆14Updated last year
• CD-R0M / YARA
  Hundred Days of Yara Challenge
  ☆12Updated 2 years ago
• jsecurity101 / Detecting-Process-Injection-Techniques
  This is a repository that is meant to hold detections for various process injection techniques.
  ☆32Updated 4 years ago
• SecurityRiskAdvisors / ATTiRe
  Attack Tool Timing and Reporting - Structured Attack Logging Format
  ☆21Updated last year
• IronNetCybersecurity / IronNetTR
  ☆37Updated this week
• mlgualtieri / PurpleTeamSummit
  ☆25Updated 3 years ago
• NVISOsecurity / nviso-cti
  ☆40Updated 5 months ago
• mitre / atomic
  A CALDERA plugin
  ☆33Updated last month
• mitre / sandcat
  A CALDERA plugin
  ☆63Updated 7 months ago
• AbdulRhmanAlfaifi / Rhaegal
  Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…
  ☆39Updated last year
• IceMoonHSV / Sim
  C# User Simulation
  ☆33Updated last year
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆23Updated 4 years ago
• Velocidex / evtx-data
  Publicly shareable windows event log message data
  ☆27Updated 4 years ago
• mitre-attack / evals_caldera
  A CALDERA plugin for ATT&CK Evaluations Round 1
  ☆33Updated last year
• carbonblack / active_c2_ioc_public
  Active C2 IoCs
  ☆96Updated last year
• BinaryDefense / IcedDecrypt
  IcedID Decryption Tool
  ☆27Updated 3 years ago
• jwillyamz / ezEmu
  See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
  ☆102Updated last year
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆86Updated last year
• c2defense / network-device-logs
  Analytics for Accounting logs from Network devices
  ☆16Updated 3 years ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆49Updated 3 months ago
• slaughterjames / excelpeek
  ☆37Updated 2 years ago
• lucky-luk3 / Infosec_Notebooks
  ☆21Updated last year