A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns by leveraging Windows Events and Sysmon logs.
☆11Apr 13, 2017Updated 9 years ago
Alternatives and similar repositories for ThreatHunter-Playbook
Users that are interested in ThreatHunter-Playbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- repo for sharing stuff☆17Jul 1, 2025Updated last year
- A set of compiled application restriction bypasses☆30Mar 15, 2017Updated 9 years ago
- A feature extension to ease the automation of Threat Hunting with ElastAlert and the ELK Stack☆14Jan 11, 2018Updated 8 years ago
- Meteor package for client + server side IMSI-catcher detection.☆21Jun 9, 2016Updated 10 years ago
- Parsing MITRE EDR Evaluation results☆12Dec 5, 2018Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Deep Security's APIs make it simple to integration with a variety of AWS Services☆18Apr 24, 2019Updated 7 years ago
- Collection of single use scripts I worte for windows forensics☆27Feb 1, 2012Updated 14 years ago
- Automatically close AWS Accounts when moved to a specific Organizational Unit, such as SuspendedOU or ToBeDeletedOU or BlackHole 😛☆14Jul 28, 2026Updated 3 months ago
- Open source SDR LTE software suite☆20Jan 11, 2018Updated 8 years ago
- ☆13Jan 20, 2020Updated 6 years ago
- ☆10Jan 14, 2022Updated 4 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- tmp files from tmp notes as tmp-pocs... ;)☆16Jun 3, 2022Updated 4 years ago
- The Center for Internet Security Enumeration and Scanning Program☆11Nov 15, 2017Updated 8 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- recovers and reconstructs fragmented Evtx files from disk images, memory dumps, pagefiles and unallocated space☆13Feb 3, 2015Updated 11 years ago
- Windows File Enumeration Intel Gathering Tool.☆17Sep 4, 2023Updated 3 years ago
- Setup push alerts using Google Scripts and Pushbullet☆10Jun 21, 2017Updated 9 years ago
- Documentation published at https://docs.pooltogether.com/ on how to use the new PoolTogether protocol.☆12Feb 18, 2022Updated 4 years ago
- Visual Studio Code Microsoft Sysinternal Sysmon configuration file extension.☆54Oct 12, 2026Updated 3 weeks ago
- ☆13Apr 6, 2016Updated 10 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Collection of operational focused osquery dashboards.☆10Jan 20, 2021Updated 5 years ago
- Web Sight Front-end Community Edition☆24May 25, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Active Directory Audit Tools for IT Audits☆89Updated this week
- A script to analyze geographic GSuite Login activity☆10Sep 3, 2017Updated 9 years ago
- Learn how to get more out of publicly available threat reports to help improve the security posture of your organization! TLP: White Thre…☆15Jun 5, 2023Updated 3 years ago
- Carving tool based in Radare2 & Yara☆17Oct 30, 2018Updated 8 years ago
- Check read, write permissions on S3 buckets in your account☆21Jun 20, 2019Updated 7 years ago
- Here comes the paintrain!☆11Aug 8, 2016Updated 10 years ago
- Some extracted Features\IoCs\Artifacts\Patterns from APT Malware☆14Mar 4, 2020Updated 6 years ago
- Visual Studio Code Target Communication Framework (TCF) Debugger Extension☆10May 27, 2026Updated 5 months ago
- Create a windows Active Directory lab☆17Oct 29, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Scripts for Looking up OUIs or Vendor information from MAC addresses☆11Dec 24, 2023Updated 2 years ago
- Checklists☆16Sep 22, 2016Updated 10 years ago
- Collection of resources on building Secure Development Lifecycle☆23Nov 10, 2018Updated 7 years ago
- Simple emergency mute/unmute for zoom meeting button☆14Mar 23, 2020Updated 6 years ago
- Various cmds to get security group information using the AWS CLI☆12Apr 13, 2018Updated 8 years ago
- Network forensics tool to parse pcap and provide visualizations using D3.js☆15Aug 19, 2013Updated 13 years ago
- • Packet capture (PCAP) file analysis to analyze traffic sent by malicious IP address.☆12Jan 1, 2015Updated 11 years ago