cado-security / MalwareAnalysis
MalwareAnalysis
☆12Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for MalwareAnalysis
- A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data☆40Updated 4 years ago
- Microsoft GPO Readiness Lateral Movement Detection Tool☆16Updated last year
- OSSEM Modular☆27Updated 4 years ago
- Random tips and tricks RE: ransomware☆14Updated 3 years ago
- Mass Triage Tools☆20Updated 4 months ago
- A list of Mitre Caldera compatible emulation-plans☆14Updated 3 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆74Updated 4 months ago
- incident response scripts☆18Updated 5 years ago
- PowerShell Script to facilitate the processing of SRUM data for on-the-fly forensics and if needed threat hunting☆23Updated 5 years ago
- A collection of hunting and blue team scripts. Mostly others, some my own.☆38Updated last year
- Threat Mitigation Strategies☆25Updated last year
- Jupyter notebooks☆22Updated 4 years ago
- Hunting Queries for Microsoft Defender Security Center https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defe…☆36Updated 3 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆35Updated last year
- Information about most important hunts which can be performed by Threat hunters while searching for any adversary/threats inside the orga…☆15Updated 5 years ago
- ☆25Updated 3 years ago
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆25Updated 10 months ago
- ☆15Updated 3 years ago
- List of PowerShell commands and commandlets that should be in your Powershel watchlist☆38Updated 3 years ago
- Cyber Threats Detection Rules☆13Updated 2 months ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 2 years ago
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆51Updated last year
- See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)☆102Updated last year
- Git for me to put all my forensics stuff☆21Updated 2 months ago
- ☆13Updated 3 years ago
- General Content☆20Updated 4 months ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 4 years ago
- Threat Box Assessment Tool☆19Updated 3 years ago