Alternatives and similar repositories for edr-artifacts

Users that are interested in edr-artifacts are comparing it to the libraries listed below

• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆62Updated 2 months ago
• MazX0p / CobaltSentry
  ☆24Updated 5 months ago
• jaredcatkinson / MalwareMorphology
  ☆81Updated 8 months ago
• N0vaSky / NovaEDR-deploy
  ☆73Updated last week
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆42Updated 6 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆21Updated 7 months ago
• eric-conrad / c2-talk
  ☆37Updated last year
• sidaf / moonshine
  ☆69Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆129Updated 6 months ago
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆42Updated last week
• amjcyber / EDRNoiseMaker
  Detect WFP filters blocking EDR communications
  ☆93Updated last year
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆50Updated 6 months ago
• c0nf1den71al / Lodestar-Forge
  Easy to use, open-source infrastructure management platform, crafted specifically for red team engagements.
  ☆80Updated this week
• mlcsec / SharpGraphView
  Microsoft Graph API post-exploitation toolkit
  ☆94Updated last year
• amjcyber / pwnlook
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆167Updated 9 months ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆96Updated last year
• krdmnbrk / atomicgen.io
  A simple tool designed to create Atomic Red Team tests with ease.
  ☆45Updated 4 months ago
• CCob / Shwmae
  ☆156Updated 6 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆126Updated last year
• Helixo32 / SimpleEDR
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆94Updated last year
• bitsadmin / lofl
  Living Off the Foreign Land setup scripts
  ☆70Updated 5 months ago
• rotarydrone / GlobalUnProtect
  Decrypt GlobalProtect configuration and cookie files.
  ☆150Updated 10 months ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆42Updated 7 months ago
• ASOT-LABS / TeamsBreaker
  ☆46Updated last year
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆155Updated last year
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆94Updated 3 months ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆82Updated last year
• 0xe7 / WonkaVision
  ☆84Updated 2 years ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆34Updated last year
• GhostPack / RAGnarok
  A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.
  ☆62Updated last year