Alternatives and similar repositories for CoverStory

Users that are interested in CoverStory are comparing it to the libraries listed below

• Insane-Forensics / drovorub-hunt
  A tool to assist with network-based hunting for GRU's Drovorub malware c2
  ☆25Updated 4 years ago
• s0lari / Decoy-sploit
  Bunch of honey related items that spoof/decoy powersploit functions.
  ☆18Updated 5 years ago
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆15Updated 5 years ago
• IceMoonHSV / Sim
  C# User Simulation
  ☆32Updated 2 years ago
• jwillyamz / ezEmu
  See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
  ☆104Updated 2 years ago
• ReconInfoSec / adversary-emulation-map
  Creates an ATT&CK Navigator map of an Adversary Emulation Plan
  ☆17Updated 3 years ago
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 5 years ago
• danielwolfman / Invoke-WordThief
  This script runs multithreading module that connects to a remote TCP server, monitors active (opened) Microsoft Word documents (.doc,.doc…
  ☆33Updated 5 years ago
• Hestat / calamity
  A script to assist in processing forensic RAM captures for malware triage
  ☆27Updated 4 years ago
• mandiant / goauditparser
  ☆45Updated 2 years ago
• shabarkin / pointer
  Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.
  ☆67Updated 3 years ago
• byt3bl33d3r / pythoncookie
  My Python Cookiecutter project template
  ☆31Updated 2 years ago
• ValcanK / HomeLab
  ☆20Updated 4 years ago
• DefensiveOrigins / APT-Lab-FastOpticsSetup
  Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform
  ☆13Updated 4 years ago
• mlgualtieri / PurpleTeamSummit
  ☆27Updated 4 years ago
• moullos / Mitigate
  Machine Interrogation To Identify Gaps & Techniques for Execution
  ☆32Updated 3 years ago
• brokensound77 / toruk
  Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data
  ☆13Updated 6 years ago
• TobySalusky / cont3xt
  Cont3xt intends to centralize and simplify a structured approach to gathering contextual intelligence in support of technical investigati…
  ☆37Updated last year
• DefensiveOrigins / APTv4_Defcon28
  Defcon 28 - Red Team Village - Applied Purple Teaming - Why Can't We Be Friends
  ☆26Updated 5 years ago
• mandiant / pulsesecure_exploitation_countermeasures
  ☆23Updated 2 years ago
• hardwaterhacker / i_want_my_eip
  Resources for I Want My EIP, presented at Derbycon 2017
  ☆11Updated 7 years ago
• Mostafayahia-hunter / Virustotal-python-API-Domains-IPs-and-URLs-
  ☆21Updated 3 years ago
• mubix / lmo
  LetMeOutOfYour.net Resources
  ☆20Updated 5 years ago
• Manticore-Platform / manticore-cli
  Manticore Adversary Emulation Cli
  ☆48Updated 5 years ago
• mr-r3b00t / OSCP
  ☆15Updated 6 years ago
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆74Updated 3 years ago
• lawiet47 / autoresponder
  Carbon Black Response IR tool
  ☆54Updated 4 years ago
• salehmuhaysin / DFIR-Tools
  All the useful tools interesting to be used
  ☆23Updated 2 years ago
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 5 years ago
• swimlane / PSAttck
  PSAttck is a light-weight framework for the MITRE ATT&CK Framework.
  ☆38Updated 3 years ago