amohanta / Detection_Engineering_ToolsLinks
Detection Engineering Tools
☆20Updated last week
Alternatives and similar repositories for Detection_Engineering_Tools
Users that are interested in Detection_Engineering_Tools are comparing it to the libraries listed below
Sorting:
- MITRE TTPs derived from Conti's leaked playbooks from XSS.IS☆41Updated 4 years ago
- ☆27Updated last year
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆39Updated 11 months ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆22Updated last year
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆15Updated last year
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆36Updated last year
- ☆15Updated last year
- Vibe Malware Triage - MCP server for static PE analysis.☆74Updated 2 months ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆45Updated 2 years ago
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆28Updated 2 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated 2 years ago
- AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…☆91Updated 6 months ago
- ☆84Updated last year
- Elastic Security Labs' malware analysis and reverse engineering library☆51Updated 4 months ago
- Tools for offensive security of NetBackup infrastructures☆43Updated 2 years ago
- a tiny program to consume from ETW providers for research☆53Updated last year
- ☆18Updated last year
- Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨☆44Updated this week
- Detonate malware on VMs and get logs & detection status☆76Updated last week
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆92Updated last year
- Malware Analysis tools☆26Updated last year
- POC tool to abuse windows server failover clusters☆53Updated 6 months ago
- ☆70Updated 2 years ago
- MSIX Building Made Easy for Defenders☆59Updated 5 months ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆53Updated 2 years ago
- Yara Rules for Modern Malware☆78Updated last year
- Process hunting Toolkit is toolkit capable of hunting down malicious processes on Windows☆14Updated last year
- Baseline a Windows System against LOLBAS☆70Updated this week
- IAT Unhooking proof-of-concept☆34Updated last year