Alternatives and similar repositories for TTP-Threat-Feeds

Users that are interested in TTP-Threat-Feeds are comparing it to the libraries listed below

• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆91Updated last year
• CroodSolutions / BeaconatorC2
  BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…
  ☆87Updated last month
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆69Updated last year
• Antonlovesdnb / ConstructingDefenseLab
  Ludus range for the Constructing Defense Lab
  ☆67Updated 3 weeks ago
• MazX0p / CobaltSentry
  ☆24Updated 9 months ago
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆66Updated 6 months ago
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆91Updated 4 months ago
• CroodSolutions / BypassIT
  BypassIT is a framework for covert malware delivery and post-exploitation using AutoIT for red / blue team self assessment.
  ☆47Updated 5 months ago
• dobin / DetonatorAgent
  Detonate malware on VMs and get logs & detection status
  ☆69Updated this week
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆33Updated 11 months ago
• 0xThiebaut / PCAPeek
  A proof-of-concept re-assembler for reverse VNC traffic.
  ☆25Updated 2 years ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆41Updated 10 months ago
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆15Updated last year
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆78Updated last year
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆53Updated 2 years ago
• HackingLZ / svg_phishing_tools
  SVG Analysis and generation tools for commonly seen SVG attachment phishing
  ☆52Updated 2 months ago
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆43Updated 10 months ago
• jaredcatkinson / MalwareMorphology
  ☆84Updated last year
• eric-conrad / c2-talk
  ☆37Updated last year
• dobin / ttpExtractor
  Extract the Procedures (TTP) from CTI reports
  ☆13Updated 5 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆121Updated 7 months ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 9 months ago
• GhostPack / RAGnarok
  A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.
  ☆69Updated 4 months ago
• eSentire / iocs
  ☆53Updated 3 weeks ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• moval0x1 / NoDelete
  NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.
  ☆49Updated 3 weeks ago
• garrettfoster13 / fustercluck
  POC tool to abuse windows server failover clusters
  ☆48Updated 4 months ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆52Updated 11 months ago
• amjcyber / EDRNoiseMaker
  Detect WFP filters blocking EDR communications
  ☆95Updated last year