Elastic Security Labs releases
☆89Jul 15, 2026Updated last month
Alternatives and similar repositories for labs-releases
Users that are interested in labs-releases are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise☆20May 18, 2026Updated 2 months ago
- Python Library for ConfigExtractor☆16Jul 30, 2026Updated 2 weeks ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 4 months ago
- IR drill plateform☆24Jul 29, 2025Updated last year
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆22Apr 16, 2021Updated 5 years ago
- Threatfox Censys is a tool to query Censys Search for IP addresses and domains and then parses the JSON and submits the results to Threat…☆41Mar 30, 2026Updated 4 months ago
- Construct triage artifact based on rules☆16Jun 18, 2026Updated last month
- ☆37Nov 30, 2023Updated 2 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated 2 months ago
- Sample evtx files to use for testing hayabusa detection rules☆70Nov 5, 2025Updated 9 months ago
- Netwitness Maltego integration Project☆18May 9, 2017Updated 9 years ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆57Apr 22, 2025Updated last year
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆16Jul 19, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Maco - Malware config extractor framework☆53Jul 7, 2026Updated last month
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 3 months ago
- This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The…☆16Jun 5, 2024Updated 2 years ago
- Configuration Extractors for Malware☆126Apr 23, 2025Updated last year
- A Rust library along with a Win32 GUI application to determine the driver load order of a Windows system (cf. https://colinfinck.de/posts…☆13Jan 26, 2025Updated last year
- Remove WPP calls from hexrays decompiled code☆60Jan 31, 2026Updated 6 months ago
- Unpacker and Config Extractor for managed Redline Stealer payloads☆39Feb 18, 2023Updated 3 years ago
- Welcome to the SEKOIA.IO Community repository!☆193Jul 8, 2026Updated last month
- Remote process shellcode injection with interactive output via named pipes☆50Jan 10, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆63Updated this week
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- ☆27Nov 26, 2024Updated last year
- A collection of curated YARA rules used as part of the Filescan.io service☆22Jul 15, 2026Updated last month
- ☆21May 28, 2026Updated 2 months ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Jun 25, 2026Updated last month
- A collaboration effort by the DFIR community to provide definitions (sometimes multiple) for common forensic terms!☆27Dec 1, 2022Updated 3 years ago
- ReversingLabs YARA Rules☆937Nov 3, 2025Updated 9 months ago
- A Compiler from Sigma rules to VQL☆19May 18, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 5 months ago
- 🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.☆16Sep 7, 2023Updated 2 years ago
- Implementation of ITaskHandler in C++☆15Feb 11, 2023Updated 3 years ago
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- Proof of concept agentic solver for nfuncs from DEF CON Quals 2025☆23Apr 18, 2025Updated last year
- ☆14Updated this week
- Dynamic Indirect Syscalls via JOP/ROP in Pure no_std, no_alloc, no dependency Rust☆45Aug 6, 2025Updated last year