Alternatives and similar repositories for SysmonHunter:

Users that are interested in SysmonHunter are comparing it to the libraries listed below

• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆94Updated 4 years ago
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆100Updated 3 years ago
• endgameinc / eqllib
  ☆160Updated 4 years ago
• sapphirex00 / Threat-Hunting
  Personal compilation of APT malware from whitepaper releases, documents and own research
  ☆259Updated 6 years ago
• Elemental-attack / Elemental
  Elemental - An ATT&CK Threat Library
  ☆317Updated 2 years ago
• marcosd4h / sysmonx
  SysmonX - An Augmented Drop-In Replacement of Sysmon
  ☆212Updated 5 years ago
• OTRF / detection-hackathon-apt29
  Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets
  ☆134Updated 4 years ago
• olafhartong / detection-sources
  ☆53Updated 5 years ago
• jymcheong / AutoTTP
  Automated Tactics Techniques & Procedures
  ☆252Updated last year
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆102Updated 2 years ago
• realparisi / WMI_Monitor
  Log newly created WMI consumers and processes to the Windows Application event log
  ☆124Updated 6 years ago
• We5ter / Flerken
  A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
  ☆164Updated 5 years ago
• ashemery / CuckooVM
  Cuckoo running in a nested hypervisor
  ☆128Updated 4 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆203Updated 4 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆367Updated 6 years ago
• Te-k / cobaltstrike
  Code and yara rules to detect and analyze Cobalt Strike
  ☆265Updated 3 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆272Updated 9 months ago
• salesforce / bro-sysmon
  How to Zeek Sysmon Logs!
  ☆102Updated 3 years ago
• Cherishao / APT-Sample
  Pull some Malware samples here for other security researchers/malware analyst's to analyze and play with.
  ☆174Updated 8 months ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆258Updated 4 years ago
• beahunt3r / Windows-Hunting
  ☆349Updated 3 years ago
• 0xtf / nsm-attack
  Mapping NSM rules to MITRE ATT&CK
  ☆69Updated 4 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆240Updated 3 years ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆350Updated 4 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆207Updated 2 years ago
• sbousseaden / PCAP-ATTACK
  PCAP Samples for Different Post Exploitation Techniques
  ☆354Updated 3 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆92Updated 6 years ago
• cyberark / ketshash
  A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.
  ☆169Updated this week
• DarkenCode / yara-rules
  Repository of yara rules
  ☆44Updated 9 years ago
• Xen0ph0n / YaraGenerator
  Automatic Yara Rule Generation
  ☆331Updated 9 years ago