TH3xACE / EDR-TestLinks
Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
☆158Updated 2 years ago
Alternatives and similar repositories for EDR-Test
Users that are interested in EDR-Test are comparing it to the libraries listed below
Sorting:
- ☆160Updated 2 years ago
- Active C&C Detector☆156Updated 2 years ago
- ☆99Updated 3 years ago
- PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …☆97Updated 3 weeks ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆83Updated last year
- Custom PowerShell module to setup an Active Directory lab environment to practice penetration testing.☆180Updated 7 months ago
- A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing…☆104Updated 2 years ago
- ☆65Updated 4 years ago
- This repo is where I store my Threat Hunting ideas/content☆87Updated 2 years ago
- Completely Risky Active-Directory Simulation Hub☆102Updated 2 years ago
- Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.☆177Updated 4 months ago
- A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.☆136Updated last year
- SpecterOps Presentations☆209Updated 5 months ago
- Default Detections for EDR☆96Updated last year
- A Azure Exploitation Toolkit for Red Team & Pentesters☆165Updated 2 years ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆252Updated last month
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆139Updated 2 weeks ago
- Finding all things on-prem Microsoft for password spraying and enumeration.☆257Updated 3 years ago
- ☆42Updated 3 years ago
- https://lolad-project.github.io/☆82Updated 11 months ago
- ☆122Updated last year
- ☆167Updated 2 years ago
- Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.☆61Updated 10 years ago
- ☆182Updated last year
- IOC Collection 2022☆57Updated 2 years ago
- ☆101Updated last year
- Simple PowerShell script to enable process scanning with Yara.☆96Updated 3 years ago
- Active Directory Purple Team Playbook☆112Updated 2 years ago
- Cortex XDR Config Extractor☆135Updated 2 years ago
- A collection of tools, scripts and personal research☆146Updated 3 months ago