cisagov / ioc-scannerLinks
Search a filesystem for indicators of compromise (IoC).
☆81Updated last week
Alternatives and similar repositories for ioc-scanner
Users that are interested in ioc-scanner are comparing it to the libraries listed below
Sorting:
- Endpoint detection for remote hosts for consumption by RITA and Elasticsearch☆74Updated 2 weeks ago
- ☆72Updated 2 years ago
- A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.☆233Updated 6 months ago
- Passive service locator, a python sniffer that identifies servers, clients, names and much more☆253Updated 2 years ago
- The Infosec Community Definitive Guide to Jupyter Notebooks☆126Updated 4 years ago
- ☆55Updated 4 years ago
- CrowdStrike's Open Source Policy & Contribution Guide☆44Updated last week
- A port of BHIS's Backdoors & Breaches for playingcards.io☆64Updated 2 years ago
- Use Terraform to Provision Your Own Cloud-Based Remote Browsing Workstation☆26Updated last year
- ☆119Updated 2 years ago
- ☆87Updated 7 months ago
- Import CrowdStrike Threat Intelligence into your instance of MISP☆48Updated 3 months ago
- Dashboard for conducting Backdoors and Breaches sessions over Zoom.☆115Updated 11 months ago
- ☆90Updated last week
- A GeoIP lookup utility utilizing ipinfo.io services.☆92Updated last year
- Stand-Alone Windows Hardening (SAWH) is a script to reduce the attack surface of Windows systems that are not attached to a Windows Activ…☆53Updated 4 years ago
- Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers☆263Updated last year
- Tools for simulating threats☆193Updated last year
- Conference presentations☆59Updated last month
- Distribution of the SANS SEC504 Windows Cheat Sheet Lab☆71Updated 5 years ago
- an awesome list of active defense resources☆125Updated 5 years ago
- ☆80Updated last year
- Synthetic Adversarial Log Objects: A Framework for synthentic log generation☆85Updated last year
- InsightVM helpful SQL queries☆71Updated 7 months ago
- A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-…☆102Updated last year
- Corelight@Home script☆44Updated 2 years ago
- Collection of resources related to the Center for Threat-Informed Defense☆76Updated last year
- Collection of useful Canary tools☆91Updated 2 months ago
- Extracts fields from zeek logs, compatible with zeek-cut☆23Updated last year
- Security Onion + Automation + Response Lab including n8n and Velociraptor☆112Updated 3 years ago