carbonblack / tau-tools

Related projects: ⓘ

• MalwareArchaeology / ARTHIR
  ATT&CK Remote Threat Hunting Incident Response
  ☆196Updated 5 years ago
• Infocyte / PSHunt
  Powershell Threat Hunting Module
  ☆274Updated 7 years ago
• randomuserid / Adama
  Searches For Threat Hunting and Security Analytics
  ☆238Updated 3 years ago
• JPCERTCC / ToolAnalysisResultSheet
  Tool Analysis Result Sheet
  ☆342Updated 6 years ago
• pan-unit42 / playbook_viewer
  ☆167Updated 2 months ago
• sbousseaden / Slides
  Misc Threat Hunting Resources
  ☆368Updated last year
• beahunt3r / Windows-Hunting
  ☆344Updated 3 years ago
• olafhartong / ATTACKdatamap
  A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework
  ☆348Updated 3 years ago
• davidpany / WMI_Forensics
  ☆293Updated 4 years ago
• MalwareArchaeology / ATTACK
  MITRE ATT&CK Windows Logging Cheat Sheets
  ☆328Updated 5 years ago
• Kirtar22 / Litmus_Test
  Detecting ATT&CK techniques & tactics for Linux
  ☆255Updated 3 years ago
• MHaggis / hunt-detect-prevent
  Lists of sources and utilities utilized to hunt, detect and prevent evildoers.
  ☆158Updated 5 years ago
• joesecurity / sigma-rules
  Sigma rules from Joe Security
  ☆199Updated last month
• endgameinc / eqllib
  ☆158Updated 3 years ago
• ubeeri / Invoke-UserSimulator
  Simulates common user behaviour on local and remote Windows hosts.
  ☆281Updated 6 years ago
• Cyb3rWard0g / Invoke-ATTACKAPI
  A PowerShell script to interact with the MITRE ATT&CK Framework via its own API
  ☆364Updated 5 years ago
• mitre / brawl-public-game-001
  Data from a BRAWL Automated Adversary Emulation Exercise
  ☆200Updated 3 years ago
• rastrea2r / rastrea2r
  Collecting & Hunting for IOCs with gusto and style
  ☆235Updated 3 years ago
• mandiant / ShimCacheParser
  ☆271Updated last year
• CredDefense / CredDefense
  Credential and Red Teaming Defense for Windows Environments
  ☆322Updated 2 months ago
• SecurityRiskAdvisors / TALR
  Threat Alert Logic Repository
  ☆88Updated 5 years ago
• n0dec / MalwLess
  Test Blue Team detections without running any attack.
  ☆269Updated 4 months ago
• travisfoley / dfirtriage
  Digital forensic acquisition tool for Windows based incident response.
  ☆328Updated 4 months ago
• mgreen27 / Invoke-LiveResponse
  Invoke-LiveResponse
  ☆145Updated 2 years ago
• inodee / threathunting-spl
  Splunk code (SPL) for serious threat hunters and detection engineers.
  ☆262Updated 8 months ago
• d3sre / Use_Case_Applicability
  Security Monitoring Resolution Categories
  ☆138Updated 2 years ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆192Updated 3 years ago
• 0xAnalyst / CB-Threat-Hunting
  ☆113Updated 7 months ago
• P4T12ICK / Sigma2SplunkAlert
  Converts Sigma detection rules to a Splunk alert configuration.
  ☆105Updated 4 years ago
• redcanaryco / redcanary-response-utils
  Tools to automate and/or expedite response.
  ☆113Updated 2 months ago