Alternatives and similar repositories for CoverStory

Users that are interested in CoverStory are comparing it to the libraries listed below

• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆15Updated 4 years ago
• Insane-Forensics / drovorub-hunt
  A tool to assist with network-based hunting for GRU's Drovorub malware c2
  ☆25Updated 4 years ago
• byt3bl33d3r / pythoncookie
  My Python Cookiecutter project template
  ☆32Updated 2 years ago
• ReconInfoSec / adversary-emulation-map
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan
  ☆17Updated 3 years ago
• mandiant / DFUR-Splunk-App
  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
  ☆12Updated 4 years ago
• Symantec / threathunters
  ☆28Updated 4 months ago
• cocaman / yara-scan-service
  Repository for scripts and tips for "Yara Scan Service"
  ☆20Updated 2 years ago
• 2igosha / sunburst_dga
  ☆22Updated 4 years ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 4 years ago
• s0lari / Decoy-sploit
  Bunch of honey related items that spoof/decoy powersploit functions.
  ☆18Updated 5 years ago
• danielwolfman / Invoke-WordThief
  This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.doc…
  ☆33Updated 4 years ago
• keydet89 / LNK
  Repository for LNK stuff
  ☆30Updated 2 years ago
• ruppde / yara_rules
  Yara rules
  ☆21Updated 2 years ago
• mandiant / pulsesecure_exploitation_countermeasures
  ☆23Updated last year
• ppt0 / easyhunting
  Get intelligence info (tags, mitre techniques, yara and more) and find similar malware in a fast and easy way
  ☆18Updated 2 years ago
• sdcampbell / Nessusploitable
  Parses Nessus .nessus files for exploitable vulnerabilities and outputs a report file in format MM-DD-YYYY-nessus.csv
  ☆39Updated last year
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 5 years ago
• scriptingislife / s3eker
  s3eker is an extensible way to find open S3 buckets.
  ☆17Updated 4 years ago
• mubix / lmo
  LetMeOutOfYour.net Resources
  ☆20Updated 4 years ago
• chaitanyakrishna / IOCScraper
  IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.
  ☆34Updated 3 years ago
• IceMoonHSV / Sim
  C# User Simulation
  ☆32Updated 2 years ago
• ahhh / presentations
  various slides and presentations I've worked on
  ☆18Updated last month
• HuskyHacks / RustyTokenManipulation
  just manipulatin these here tokens yes sir nothing weird
  ☆22Updated 3 years ago
• DefensiveOrigins / APTv4_Defcon28
  Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends
  ☆26Updated 4 years ago
• shabarkin / pointer
  Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.
  ☆65Updated 3 years ago
• NexusFuzzy / raccoon_config
  Scans a list of raccoon servers from Tria.ge and extracts the config
  ☆15Updated last year
• mlgualtieri / PurpleTeamSummit
  ☆27Updated 3 years ago
• mandiant / goauditparser
  ☆45Updated last year
• rj-chap / ransomware_tips
  Random tips and tricks RE: ransomware
  ☆14Updated 3 years ago
• keydet89 / IWSBook
  Site for IWS book content
  ☆18Updated 6 years ago