Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proactively identify, engage and prevent cyber threats denying or mitigating potential damage to the organization.
☆91Sep 16, 2023Updated 3 years ago
Alternatives and similar repositories for AIMOD2
Users that are interested in AIMOD2 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Execute embedded Mimikatz☆13Nov 24, 2021Updated 4 years ago
- A repository of my own Sigma detection rules.☆167Nov 25, 2025Updated 11 months ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&…☆387Dec 9, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆667Oct 24, 2026Updated last week
- ☆34Jun 13, 2023Updated 3 years ago
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆164Apr 6, 2025Updated last year
- Modular malware analysis artifact collection and correlation framework☆56Apr 23, 2024Updated 2 years ago
- Detection engineering with durable memory, a five-stage lifecycle, and an agentic surface — the sibling of ATHF.☆35Oct 14, 2026Updated 2 weeks ago
- ADXFlowmaster helps SecOps teams Threat Hunt suspicious network traffic inside & outside of Azure.☆39Oct 30, 2024Updated 2 years ago
- A Jupyter notebook to assist with the analysis of the output generated from Volatility memory extraction framework.☆98May 28, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.☆215Jul 21, 2022Updated 4 years ago
- A preconfigured Velociraptor triage collector☆79Oct 19, 2026Updated 2 weeks ago
- Initial triage of Windows Event logs☆106Jun 16, 2024Updated 2 years ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- A collection of companies that disclose adversary TTPs after they have been breached☆306Sep 20, 2026Updated last month
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365☆796Oct 29, 2022Updated 4 years ago
- Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)☆24Mar 30, 2026Updated 7 months ago
- Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders☆1,086Oct 5, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆69Apr 1, 2026Updated 7 months ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆358Oct 25, 2026Updated last week
- Public script from SANS FOR509 Enterprise Cloud Incident Response☆242Oct 26, 2025Updated last year
- A framework for developing alerting and detection strategies for incident response.☆925Oct 2, 2026Updated last month
- Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique☆70Mar 17, 2024Updated 2 years ago
- The Intelligent Process Lifecycle of Active Cyber Defenders☆34Jan 1, 2023Updated 3 years ago
- Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).☆831Oct 21, 2026Updated last week
- A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs☆871Oct 20, 2026Updated last week
- The Threat Actor Profile Guide for CTI Analysts☆121Jul 15, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- General Content☆28Jul 28, 2026Updated 3 months ago
- Default Detections for EDR☆96Feb 20, 2024Updated 2 years ago
- MISP to Microsoft Defender integration☆19Jul 9, 2026Updated 3 months ago
- Misc Threat Hunting Resources☆376Jan 26, 2023Updated 3 years ago
- Resources To Learn And Understand SIGMA Rules☆189Feb 14, 2023Updated 3 years ago
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 6 months ago
- A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.☆863Jun 29, 2026Updated 4 months ago