Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs
☆43Oct 21, 2018Updated 8 years ago
Alternatives and similar repositories for threat_hunting_tables
Users that are interested in threat_hunting_tables are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Auxiliary scripts for Incident Response with ELK☆11Oct 7, 2015Updated 11 years ago
- ☆10Dec 19, 2017Updated 8 years ago
- Reference sheet for Threat Hunting Professional Course☆26Mar 10, 2019Updated 7 years ago
- LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network☆74Jul 9, 2019Updated 7 years ago
- PowerShell module to play with Kerberos S4U extensions☆23Sep 14, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Use DNS to hunt for threats including DGAs☆15Jan 4, 2016Updated 10 years ago
- Presentation Slides☆26Jun 7, 2019Updated 7 years ago
- Simple web frontend to an elasticsearch database made for local files indexing☆19Oct 25, 2019Updated 7 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆99Aug 7, 2020Updated 6 years ago
- ☆14Jun 26, 2020Updated 6 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to t…☆35Oct 12, 2026Updated 2 weeks ago
- C# Situational Awareness Script☆34Apr 26, 2019Updated 7 years ago
- Threat Hunting is time consuming enough as it is. Coming up with and tracking metrics to justify your hunt team to the Execs often takes…☆13Dec 7, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Crack your macros like the math pros.☆33Feb 14, 2017Updated 9 years ago
- Squirtle the Browser-based NTLM Attack Toolkit☆16Apr 13, 2015Updated 11 years ago
- Repo containing docker-compose files and setup scripts without having to clone the individual reternal components☆111Mar 25, 2021Updated 5 years ago
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆36Dec 9, 2019Updated 6 years ago
- A CALDERA plugin☆85Apr 30, 2026Updated 6 months ago
- Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments☆401Feb 27, 2024Updated 2 years ago
- POC for utilizing wikipedia API for Command and Control☆29Dec 8, 2022Updated 3 years ago
- Burp Suite Professional extension in Java for Tabnabbing attack☆13May 8, 2018Updated 8 years ago
- Threat Detection System using Hybrid (Machine Learning + Lexical Analysis) learning Approach.☆11May 30, 2017Updated 9 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆30Nov 15, 2018Updated 7 years ago
- A repository that maps API calls to Sysmon Event ID's.☆122Nov 14, 2022Updated 3 years ago
- A Splunk app mapped to MITRE ATT&CK to guide your threat hunts☆1,190Jul 26, 2023Updated 3 years ago
- AWSATT&CK adds MITRE ATT&CK context and additional logging capabilities to Rhino Security Labs's open-source AWS exploitation framework, …☆46Mar 5, 2021Updated 5 years ago
- Track C2 servers, tools, and botnets over time by framework and location☆44Feb 9, 2025Updated last year
- Remove individual lines from Windows Event Viewer Log (EVT) files☆45Apr 17, 2021Updated 5 years ago
- carcass is a Python package to generate python package scaffolding based on best practices☆17Jan 10, 2022Updated 4 years ago
- The Open Command and Control Forum promotes the global development and adoption of the OpenC2 language and reference material.☆30May 25, 2017Updated 9 years ago
- Automated Tactics Techniques & Procedures☆262May 26, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Virtual scenario for Network Penetration Testing☆14Mar 19, 2017Updated 9 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Threat Alert Logic Repository☆93Feb 7, 2019Updated 7 years ago
- Helper script for mangling CS payloads☆48May 5, 2019Updated 7 years ago
- ☆53May 21, 2018Updated 8 years ago
- This repo will contain slides and information from the Attacking Active Directory Hacking Series talks presented at SecKC.☆35Jun 26, 2024Updated 2 years ago
- Powershell module to get the NetNTLMv2 hash of the current user☆98Jul 5, 2022Updated 4 years ago