alwashali / detection-validation
Detection rule validation
☆41Updated last year
Alternatives and similar repositories for detection-validation:
Users that are interested in detection-validation are comparing it to the libraries listed below
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆50Updated last month
- Contains compiled binaries of Volatility☆30Updated 3 months ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆50Updated last year
- MS Graph Commands and Tools for Blue Teamers☆49Updated last year
- ESXi Cyber Security Incident Response Script☆22Updated 4 months ago
- ShellSweeping the evil.☆52Updated 7 months ago
- Yara Rules for Modern Malware☆73Updated 10 months ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆73Updated last year
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆30Updated last month
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆26Updated 2 years ago
- Baseline a Windows System against LOLBAS☆25Updated 8 months ago
- Simple PowerShell script to enable process scanning with Yara.☆91Updated 2 years ago
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated last year
- Sigma detection rules for hunting with the threathunting-keywords project☆51Updated last month
- ☆20Updated last year
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆20Updated 3 months ago
- Accelerating the collection, processing, analysis and outputting of digital forensic artefacts.☆32Updated last month
- C2 Active Scanner☆51Updated 7 months ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 2 years ago
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Updated last year
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆62Updated 2 years ago
- CarbonBlack EDR detection rules and response actions☆71Updated 4 months ago
- An exercise to practice deobfuscating PowerShell Scripts.☆28Updated last year
- Simple Script to Help You Find All Files Has Been Modified, Accessed, and Created In A Range Time.☆27Updated 2 years ago
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆19Updated this week
- Jupyter Notebooks for Cyber Threat Intelligence☆35Updated last year
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆34Updated last year
- Remote access and Antivirus Logging Database☆43Updated 8 months ago
- Bloodhound Portable for Windows☆51Updated last year