Elastic Security Labs releases
☆90Sep 11, 2026Updated last week
Alternatives and similar repositories for labs-releases
Users that are interested in labs-releases are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Indicators of compromise☆19May 18, 2026Updated 4 months ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 6 months ago
- Python Library for ConfigExtractor☆16Jul 30, 2026Updated last month
- IR drill plateform☆24Jul 29, 2025Updated last year
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆14Jun 27, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of Terraform and Ansible scripts that automatically (and quickly) deploys a small Velociraptor R&D lab.☆23Apr 16, 2021Updated 5 years ago
- Threatfox Censys is a tool to query Censys Search for IP addresses and domains and then parses the JSON and submits the results to Threat…☆41Mar 30, 2026Updated 5 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆223Updated this week
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Updated this week
- Sample evtx files to use for testing hayabusa detection rules☆71Nov 5, 2025Updated 10 months ago
- Netwitness Maltego integration Project☆18May 9, 2017Updated 9 years ago
- The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.☆57Apr 22, 2025Updated last year
- ☆12Nov 12, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago
- Maco - Malware config extractor framework☆55Aug 19, 2026Updated last month
- Remote access and Antivirus Logging Database☆45Apr 27, 2026Updated 4 months ago
- This repository contains a proof-of-concept (PoC) exploit for CVE-2024-24919, a critical vulnerability discovered in Check Point SVN. The…☆16Jun 5, 2024Updated 2 years ago
- Configuration Extractors for Malware☆127Apr 23, 2025Updated last year
- Unpacker and Config Extractor for managed Redline Stealer payloads☆40Feb 18, 2023Updated 3 years ago
- Welcome to the SEKOIA.IO Community repository!☆196Updated this week
- Remote process shellcode injection with interactive output via named pipes☆50Jan 10, 2024Updated 2 years ago
- ☆66Sep 10, 2026Updated 2 weeks ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- ☆27Nov 26, 2024Updated last year
- ☆21Aug 27, 2026Updated 3 weeks ago
- An experimental Velociraptor implementation using cloud infrastructure☆26Updated this week
- ReversingLabs YARA Rules☆944Nov 3, 2025Updated 10 months ago
- A Compiler from Sigma rules to VQL☆20May 18, 2026Updated 4 months ago
- Elastic Security detection content for Endpoint☆1,494Updated this week
- 🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.☆16Sep 7, 2023Updated 3 years ago
- Implementation of ITaskHandler in C++☆15Feb 11, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- Proof of concept agentic solver for nfuncs from DEF CON Quals 2025☆23Apr 18, 2025Updated last year
- An i686 & x86_64 position independent implant template for Rust 🦀☆38May 9, 2026Updated 4 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆35Feb 17, 2026Updated 7 months ago
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆13Apr 15, 2024Updated 2 years ago
- Dynamic Indirect Syscalls via JOP/ROP in Pure no_std, no_alloc, no dependency Rust☆44Aug 6, 2025Updated last year
- Hunt the windows Registry automatically using VQL☆18Aug 7, 2026Updated last month