The purpose of these documents, it was to execute several efficiency and detection tests in some endpoint solutions, this document brings the result of the defensive security analysis with an offensive mindset performed in the execution many different Malwares in our lab environment.
☆21Dec 23, 2020Updated 5 years ago
Alternatives and similar repositories for Threat-Hunting
Users that are interested in Threat-Hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux kernel internals' notes☆21Jul 7, 2026Updated 2 months ago
- SpyCore - Windows Malicious FIle Scanner (Distributes)☆14Jun 10, 2023Updated 3 years ago
- https://www.youtube.com/watch?v=qsjGj_L1kyo☆10Jul 29, 2021Updated 5 years ago
- Powershell script to automate finding privilege escalation vectors in windows environments.☆16Nov 30, 2019Updated 6 years ago
- Command-line tool to search for malware samples in various repositories☆14Mar 3, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Digital forensics image that was prepared to cover a full Windows Forensics☆21Dec 26, 2023Updated 2 years ago
- ☆16Oct 12, 2025Updated 11 months ago
- Cyber Threat Intelligence Appliance☆13Dec 8, 2022Updated 3 years ago
- Challenge files☆11Sep 30, 2021Updated 4 years ago
- Home of https://redteam.guide☆15Aug 17, 2026Updated last month
- Malware AV evasion via disable Windows Defender (Registry). C++☆35Jun 5, 2022Updated 4 years ago
- Tracking my journey towards earning my OSCP. This includes the process of everything that I learn along the way.☆47Nov 23, 2021Updated 4 years ago
- Plugin for NOPing instructions in IDA☆21May 9, 2024Updated 2 years ago
- A malicious KeePass plugin to exfiltrate the master key.☆16Oct 25, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆16Aug 7, 2021Updated 5 years ago
- This repository stores the proof-of-concept of Windows malware categorized with MITRE ATT&CK.☆14Nov 8, 2024Updated last year
- Analyzes AdminSDHolder permissions & compares with default baseline or a previous run, to detect potential backdoor/excessive persistent …☆16Apr 8, 2025Updated last year
- windows-operating-system-archaeology @Enigma0x3 @subTee☆24Apr 22, 2017Updated 9 years ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Jul 27, 2022Updated 4 years ago
- SQLMap Inject Suite Pro☆24Nov 2, 2025Updated 10 months ago
- custom impacket mssqlclient☆26Sep 16, 2023Updated 3 years ago
- Windows-only Remote Access Tool (RAT) with anti-debugging and anti-sandbox checks. For educational purposes only.☆51Jul 13, 2021Updated 5 years ago
- A script that turns a phrase into a one-time pad and series of numbers. It also creates an audio file reading the series of numbers, to r…☆12Nov 15, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆11Sep 2, 2020Updated 6 years ago
- CSV to JSON command line app written in RUST☆14Jan 21, 2018Updated 8 years ago
- Yet another Windows DLL injector.☆40Nov 17, 2021Updated 4 years ago
- ☆49Jul 19, 2024Updated 2 years ago
- Hunting Malicious Macros SANS Threathunting Summit 2021 Materials☆39Oct 9, 2021Updated 4 years ago
- GUI manager for network tunnels developed for Command and Control systems.☆17Feb 7, 2023Updated 3 years ago
- The method and files used to generate Sysmon event logs, push them to a remote Splunk, and ingest/normalize the data for analysis.☆10Sep 28, 2020Updated 5 years ago
- Vagrant Files to create a Virtualbox VM for Malware Analysis☆13Jun 1, 2021Updated 5 years ago
- MBC v2.x expressed in STIX 2.1 JSON☆17Oct 3, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Evaluation of packer type estimation/detection tools☆14Mar 24, 2021Updated 5 years ago
- Emacs major mode for DokuWiki document☆15Feb 10, 2023Updated 3 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆16Jan 10, 2024Updated 2 years ago
- A landing page for great justice☆21Sep 1, 2025Updated last year
- Sysmon Tools for PowerShell☆12Aug 17, 2018Updated 8 years ago
- Threat Mitigation Strategies☆29Aug 11, 2026Updated last month
- Multiplayer stealth action game. Created in 48 hours for Ludum Dare 29, "beneath the surface."☆15May 6, 2014Updated 12 years ago