fortinet / ips-bph-framework
BLACKPHENIX is an open source malware analysis automation framework composed of services, scripts, plug-ins, and tools and is based on a Command-and-Control (C&C) architecture
☆31Updated last year
Alternatives and similar repositories for ips-bph-framework:
Users that are interested in ips-bph-framework are comparing it to the libraries listed below
- Public rules and samples for various automations through LimaCharlie.io☆12Updated 3 years ago
- hassh-utils: Nmap NSE Script and Docker image for HASSH - the SSH client/server fingerprinting method (https://github.com/salesforce/hass…☆57Updated 7 months ago
- Analytics for Accounting logs from Network devices☆17Updated 4 years ago
- ☆20Updated 4 years ago
- Notebooks created to attack and secure Active Directory environments☆27Updated 5 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆34Updated 5 years ago
- IDS Utility Belt For Automating/Testing Various Things☆30Updated 4 years ago
- python wrapper to use tshark for file extraction from the command line.☆27Updated 6 years ago
- Manticore's Public Threats Repository☆10Updated 4 years ago
- Working through Practical Malware Analysis from No Starch Press☆13Updated 7 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆64Updated last year
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Updated 6 years ago
- Microsoft Flow Attack Framework☆23Updated 5 years ago
- Indicator of Compromise Scanner for CVE-2019-19781☆94Updated 5 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆38Updated 2 months ago
- C# User Simulation☆32Updated 2 years ago
- Useful Windows and AD tools☆15Updated 3 years ago
- THOR MITRE ATT&CK Framework Coverage☆24Updated 4 years ago
- Audit Powershell and search from known keywords in history #Blueteam☆25Updated 5 years ago
- No-Script Automation Tool☆56Updated 6 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Updated 4 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- Python parser for Red Canary's Atomic Red Team Yamls☆27Updated 6 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆23Updated last year
- Check IOC provided by a MISP instance on Suricata events☆17Updated 5 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆13Updated 5 years ago
- Free and open cyber-security auditing tool with collective intelligence☆21Updated 5 years ago
- ArmourBird CSF - Container Security Framework☆44Updated 3 years ago
- Accompanying PowerShell Modules for DevSec Defense Presentation☆29Updated 7 years ago