Alternatives and similar repositories for EDR-Test

Users that are interested in EDR-Test are comparing it to the libraries listed below

• MazX0p / ThreatHound
  ☆160Updated last year
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆156Updated 2 years ago
• HernanRodriguez1 / MimikatzFUD
  ☆99Updated 3 years ago
• Qazeer / FarsightAD
  PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory …
  ☆96Updated 3 months ago
• BC-SECURITY / Long-Live-The-Empire
  A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing…
  ☆105Updated 2 years ago
• CyberSecurityUP / Adversary-Emulation-Matrix
  ☆65Updated 4 years ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• trustedsec / User-Behavior-Mapping-Tool
  ☆166Updated 2 years ago
• dahvidschloss / CRASH
  Completely Risky Active-Directory Simulation Hub
  ☆103Updated last year
• swimlane / atomic-operator
  A Python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments.
  ☆135Updated last year
• SpecterOps / presentations
  SpecterOps Presentations
  ☆209Updated 3 months ago
• 0xJs / domain_audit
  Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.
  ☆176Updated 3 months ago
• SikretaLabs / BlueMap
  A Azure Exploitation Toolkit for Red Team & Pentesters
  ☆164Updated 2 years ago
• xbufu / ADLab
  Custom PowerShell module to setup an Active Directory lab environment to practice penetration testing.
  ☆176Updated 6 months ago
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆88Updated 2 years ago
• IppSec / PowerSiem
  ☆122Updated last year
• q0phi80 / Wakanda-Land
  ☆42Updated 3 years ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆96Updated 3 years ago
• PhilKeeble / AWS-RedTeam-ADLab
  ☆118Updated 4 years ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆248Updated 6 months ago
• puzzlepeaches / msprobe
  Finding all things on-prem Microsoft for password spraying and enumeration.
  ☆257Updated 3 years ago
• mvelazc0 / PurpleTeamPlaybook
  Active Directory Purple Team Playbook
  ☆113Updated 2 years ago
• Res260 / conti_202202_leak_procedures
  This repository contains procedures found in the Feb 2022 conti leaks. They were taken from the "manual_teams_c" rocketchat channel in th…
  ☆87Updated 3 years ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• LOLAPPS-Project / LOLAPPS
  LOLAPPS is a compendium of applications that can be used to carry out day-to-day exploitation.
  ☆191Updated 8 months ago
• darkoperator / Veil-PowerView
  Veil-PowerView is a powershell tool to gain network situational awareness on Windows domains.
  ☆60Updated 10 years ago
• LOLAD-Project / LOLAD-Project.github.io
  https://lolad-project.github.io/
  ☆81Updated 9 months ago
• silence-is-best / files
  ☆100Updated last year
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆145Updated 2 months ago
• NVISOsecurity / pyCobaltHound
  pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Blood…
  ☆136Updated 2 years ago