☆169Sep 30, 2025Updated 5 months ago
Alternatives and similar repositories for SWAT
Users that are interested in SWAT are comparing it to the libraries listed below
Sorting:
- DeRF (Detection Replay Framework) is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation o…☆101Jan 12, 2024Updated 2 years ago
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆83Apr 27, 2024Updated last year
- Granular, Actionable Adversary Emulation for the Cloud☆2,277Mar 12, 2026Updated last week
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆339Mar 11, 2026Updated last week
- Azure DevOps Services Attack Toolkit☆313Mar 15, 2025Updated last year
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- SQL, IIS, Oh My...☆22Feb 24, 2025Updated last year
- Tool for obfuscating and deobfuscating data.☆77Mar 20, 2024Updated last year
- Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threa…☆1,406Jun 24, 2025Updated 8 months ago
- AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE…☆1,207Dec 29, 2025Updated 2 months ago
- ☆25Jun 27, 2024Updated last year
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated last year
- A curated list of resources about detecting threats and defending Kubernetes systems.☆405Sep 2, 2023Updated 2 years ago
- The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).☆414Updated this week
- ☆65May 21, 2024Updated last year
- Aftermath is a free macOS IR framework☆570Sep 25, 2025Updated 5 months ago
- A tool to create randomly insecure file shares that also contain unsecured credential files☆49Feb 16, 2026Updated last month
- ☆191Mar 9, 2026Updated last week
- FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is de…☆818Mar 6, 2026Updated 2 weeks ago
- Slides and Codes used for the workshop Red Team Infrastructure Automation☆193Apr 14, 2024Updated last year
- Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.☆578Feb 12, 2026Updated last month
- DFIR project to collect and analyze events in Google Workspace☆13Apr 12, 2024Updated last year
- Generates runbooks for GuardDuty findings☆38Jun 24, 2024Updated last year
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆608Nov 28, 2024Updated last year
- Active C&C Detector☆156Oct 5, 2023Updated 2 years ago
- OWASP Domain Protect - prevent subdomain takeover☆397Dec 23, 2024Updated last year
- Canary Detection☆192Oct 20, 2025Updated 5 months ago
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆16Jul 19, 2022Updated 3 years ago
- A collection of companies that disclose adversary TTPs after they have been breached☆289Updated this week
- Collection of Docker honeypot logs from 2021 - 2024☆36Sep 30, 2024Updated last year
- ☆14Jun 20, 2022Updated 3 years ago
- Elastic Security detection content for Endpoint☆1,384Mar 13, 2026Updated last week
- This repo contains IOC, malware and malware analysis associated with Public cloud☆249Nov 11, 2024Updated last year
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Oct 9, 2024Updated last year
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆142Jan 2, 2025Updated last year
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 2 years ago
- ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit l…☆173Mar 2, 2026Updated 2 weeks ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆113Nov 13, 2024Updated last year
- BlueHound - pinpoint the security issues that actually matter☆761Jul 12, 2023Updated 2 years ago