Alternatives and similar repositories for cs-discovery

Users that are interested in cs-discovery are comparing it to the libraries listed below

• matthw / malware_analysis
  ☆18Updated last year
• RedTeamOperations / Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW
  CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"
  ☆49Updated 3 years ago
• georgi-i / winevt_logs_analysis
  Searching .evtx logs for remote connections
  ☆24Updated 2 years ago
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆69Updated 3 years ago
• iomoath / web-log-analyzer
  Web access logs analyzer - provides an insight on how remote hosts behave
  ☆15Updated 3 years ago
• RiccardoAncarani / talks
  ☆42Updated 3 years ago
• AhmedKamal1432 / Evilize
  Triaging Windows event logs based on SANS Poster
  ☆39Updated 2 years ago
• Immersive-Labs-Sec / BruteRatel-DetectionTools
  A collection of Tools and Rules for decoding Brute Ratel C4 badgers
  ☆64Updated 3 years ago
• Droogy / Malware-Study
  A collection of notes and rules (Snort/Suricata, Sigma, and YARA) to identify various samples of malware.
  ☆14Updated 3 years ago
• horizon3ai / CVE-2021-44077
  Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077
  ☆34Updated 3 years ago
• ZeroPointSecurity / Domain-Enumeration-Tool
  Perform Windows domain enumeration via LDAP
  ☆36Updated 3 years ago
• JPCERTCC / CobaltStrike-Config
  Repository for archiving Cobalt Strike configuration
  ☆31Updated this week
• dmcxblue / Red-Team-Notes
  Just learning around new stuff mostly Red Teaming and such but will try to see if I can update or simplify them more, nothing too exotic …
  ☆43Updated 3 years ago
• sketchymoose / workslikeaJARM
  Method of finding interesting domains using keywords + JARMs
  ☆13Updated 2 years ago
• 3xpl01tc0d3r / Building-ActiveDirectory-Lab
  Building ActiveDirectory Lab for practicing various attack vectors used during Red Team engagement.
  ☆37Updated 5 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆54Updated 3 years ago
• R-Secure / AMSI-Bypasses
  This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…
  ☆24Updated 3 years ago
• cedowens / Mod_Rewrite_Automation
  Scripts to automate standing up apache2 with mod_rewrite in front of C2 servers.
  ☆47Updated 4 years ago
• crawl3r / DaaC2
  Discord as a C2
  ☆49Updated 4 years ago
• citronneur / kerlab
  Kerberos laboratory to better understand and then detecting attack on kerberos
  ☆70Updated 4 years ago
• horizon3ai / CVE-2023-26067
  Lexmark CVE-2023-26067
  ☆26Updated last year
• SIFalcon / Detection
  ☆22Updated 2 years ago
• Finch4 / Malware-Analysis-Reports
  My Malware Analysis Reports
  ☆20Updated 3 years ago
• jbaines-r7 / hook
  Proof of Concept for WatchGuard Authenticated Arbitrary File Read (CVE-2022-31749)
  ☆10Updated 3 years ago
• BushidoUK / Abused-Legitimate-Services
  Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups
  ☆60Updated 2 years ago
• DidierStevens / AdHoc
  AdHoc solutions
  ☆48Updated last year
• michael2to3 / c2-search-netlas
  Search for c2 servers based on netlas
  ☆39Updated 2 years ago
• advanced-threat-research / NetLlix
  A project created with an aim to emulate and test exfiltration of data over different network protocols.
  ☆31Updated 2 years ago
• hausec / CobaltStrikeToGhostWriter
  Log converter from CS log to Ghostwriter CSV
  ☆30Updated 4 years ago
• knight0x07 / PoC-Malware-TTPs
  PoC-Malware-TTPs
  ☆49Updated 2 years ago