exp0se / detect_kerberos_attacks
Detect kerberos attacks in pcap files
☆28Updated 9 years ago
Alternatives and similar repositories for detect_kerberos_attacks:
Users that are interested in detect_kerberos_attacks are comparing it to the libraries listed below
- Bro integration with osquery☆15Updated 2 years ago
- Repository for my ATT&CK analysis research.☆69Updated 5 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆49Updated 6 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆85Updated 7 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- Splunk App to assist Sysmon Threat Hunting☆38Updated 8 years ago
- Bro PCAP Processing and Tagging API☆28Updated 7 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Sysmon config for both Windows and Linux Devices. Windows one is a bit dated☆55Updated 9 months ago
- ☆27Updated 7 years ago
- ☆52Updated 6 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆71Updated 3 years ago
- Comprehensive Pivoting Framework☆20Updated 8 years ago
- A Windows REG file to enable all default PowerShell logging on a system with PowerShell v5 installed☆16Updated 8 years ago
- Public rules and samples for various automations through LimaCharlie.io☆12Updated 3 years ago
- Historical Observations of Actionable Reputation Data☆13Updated 6 years ago
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 7 years ago
- Python scripts to parse scans.io ssl data and ingest into elasticsearch for searching☆33Updated 8 years ago
- A PowerShell tool which provides an easy way to check for shared passwords between Windows Active Directory accounts☆32Updated 6 years ago
- Cybersecurity Incidents Mind Maps☆33Updated 3 years ago
- Presentation materials for talks I've given.☆20Updated 5 years ago
- OSSEM Modular☆27Updated 4 years ago
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆56Updated 3 years ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆42Updated 6 years ago
- ☆53Updated 6 years ago
- Trace ScriptBlock execution for powershell v2☆40Updated 5 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- Crack your macros like the math pros.☆33Updated 8 years ago