Velocidex / cloudvelo
An experimental Velociraptor implementation using cloud infrastructure
☆23Updated last week
Alternatives and similar repositories for cloudvelo:
Users that are interested in cloudvelo are comparing it to the libraries listed below
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆34Updated 3 years ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated 2 weeks ago
- ☆17Updated 6 months ago
- ☆41Updated 10 months ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆18Updated last year
- ESXi Cyber Security Incident Response Script☆23Updated 5 months ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆13Updated last year
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Updated last year
- SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP and training users in…☆22Updated last week
- DNS Dashboard for hunting and identifying beaconing☆14Updated 4 years ago
- A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.☆38Updated 10 months ago
- CLI generator for Velociraptor offline collector☆9Updated 5 months ago
- Send High & New Incidents to The Hive incident management Platform☆18Updated 4 years ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Updated 2 years ago
- A MITRE ATT&CK Lookup Tool☆45Updated 9 months ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Updated 3 years ago
- Hundred Days of Yara Challenge☆12Updated 2 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆13Updated 3 years ago
- Bloodhound Portable for Windows☆51Updated last year
- A repository of Sysmon For Linux configuration modules☆15Updated 3 years ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.☆32Updated 5 years ago
- Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…☆15Updated 4 years ago
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.☆16Updated 2 months ago
- General Content☆22Updated 7 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆53Updated 3 weeks ago
- Living off the False Positive!☆33Updated 3 weeks ago
- This script is to build Wazuh 4.3 environment☆13Updated 2 years ago