Alternatives and similar repositories for TellTail

Users that are interested in TellTail are comparing it to the libraries listed below

• biffalo / easy-wins-endpoint-defense
  Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…
  ☆38Updated last year
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• DefensiveOrigins / DO-LAB
  ☆50Updated last week
• YossiSassi / hAcKtive-Directory-Forensics
  ☆53Updated 3 months ago
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆25Updated last year
• Bert-JanP / Domain-Response
  Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…
  ☆49Updated last month
• matthieugras / timeline-downloader
  ☆70Updated last week
• Neo23x0 / Talks
  Slides of my public talks
  ☆56Updated 2 years ago
• tsale / EDR-Telemetry-Website
  ☆74Updated last week
• CTI-Driven / Microsoft-ASR-to-MITRE-ATTACK-Mapping-Project
  This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…
  ☆29Updated last year
• MHaggis / notes
  Full of public notes and Utilities
  ☆130Updated last month
• NetSPI / PowerHunt
  PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
  ☆71Updated last year
• redcanaryco / ansible-atomic-red-team
  This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam
  ☆27Updated last year
• openrelik / openrelik-deploy
  Tools and scripts to deploy and manage OpenRelik instances
  ☆16Updated 8 months ago
• CrowdStrike / VirtualGHOST
  VirtualGHOST Detection Tool
  ☆105Updated 2 months ago
• FalconForceTeam / FalconForge
  This repository is used by FalconForce to release parts of the internal tools used for maintaining, validating and automatically deployin…
  ☆17Updated 2 years ago
• Neo23x0 / god-mode-rules
  God Mode Detection Rules
  ☆135Updated last year
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆87Updated 2 years ago
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆52Updated last week
• CyberDefend3r / PowerShell-Deobfuscation-Exercise
  An exercise to practice deobfuscating PowerShell Scripts.
  ☆26Updated 3 years ago
• Blumira / Kerberoast-Detection
  Kerberoast Detection Script
  ☆31Updated last year
• rootsecdev / Presentations
  Presentations from Conferences
  ☆30Updated last year
• MHaggis / SDDLMaker
  The home of the SDDLMaker
  ☆28Updated last year
• delivr-to / detections
  A home for detection content developed by the delivr.to team
  ☆73Updated 6 months ago
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆145Updated 3 years ago
• nasbench / Eventlog_Compendium
  The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.
  ☆51Updated 9 months ago
• freeload101 / Bloodhound-Portable
  Bloodhound Portable for Windows
  ☆53Updated 2 years ago
• elementalsouls / DumpLSASS
  ☆33Updated last year
• secgroundzero / KQL_Reference_Manual
  ☆43Updated 4 years ago
• Koifman / LUMEN
  Your Browser-based EVTX Companion
  ☆112Updated this week