Alternatives and similar repositories for tehsat

Users that are interested in tehsat are comparing it to the libraries listed below

• k3idii / CobaltStrike-Tools
  Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...
  ☆30Updated 2 years ago
• ahhh / presentations
  various slides and presentations I've worked on
  ☆19Updated 2 months ago
• Th1ru-M / Windows-Threat-Hunting
  Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine
  ☆22Updated 6 months ago
• threatexpress / procdot_sandbox
  ProcDot Malware Sandbox
  ☆24Updated 6 months ago
• robindimyan / apthowto
  Liberating dem proprietary APT implants
  ☆20Updated 5 years ago
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆26Updated 3 years ago
• sourcefrenchy / goqrexfil
  A mini project to exfiltrate data via QR codes
  ☆19Updated last week
• Manticore-Platform / public-threats
  Manticore's Public Threats Repository
  ☆10Updated 4 years ago
• 2igosha / sunburst_dga
  ☆22Updated 4 years ago
• snemes / malware-analysis
  ☆23Updated 4 years ago
• fatihsirin / Tweettioc-Splunk-App
  Tweettioc Splunk App
  ☆20Updated 4 years ago
• keydet89 / LNK
  Repository for LNK stuff
  ☆30Updated 2 years ago
• peasead / windows-sandbox-to-elastic
  Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.
  ☆50Updated last year
• IceMoonHSV / Sim
  C# User Simulation
  ☆32Updated 2 years ago
• JPCERTCC / SurfaceAnalysis-on-Cloud
  Surface Analysis System on Cloud
  ☆19Updated last year
• 001SPARTaN / SaltedCaramel
  Apfell implant written in C#.
  ☆8Updated 4 years ago
• G0ldenGunSec / wmiServSessEnum
  .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems
  ☆33Updated 5 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• sourcefrenchy / spotexfil
  A simple way to exfiltrate data using spotify API
  ☆18Updated last month
• sourcefrenchy / certexfil
  Exfiltration based on custom X509 certificates
  ☆26Updated last year
• nettitude / PoshC2_IOCs
  A list of IOCs applicable to PoshC2
  ☆24Updated 4 years ago
• tevora-threat / atomic_red_team_gui
  Windows GUI/Execution Engine for Atomic Red Team Atomics
  ☆34Updated 5 years ago
• Sh3llyR / statiStrings
  YARA Rule Strings Statistics Calculator and Malware Research Helper
  ☆13Updated 3 years ago
• fox-it / signed-phishing-email
  ☆11Updated 6 years ago
• SIFalcon / Detection
  ☆22Updated last year
• lemmou / RansomNoteFiles
  ☆24Updated last year
• claroty / MMS-Stack-Detector
  ☆13Updated 8 months ago
• LaresLLC / AzureTokenExtractor
  Extracts Azure authentication tokens from PowerShell process minidumps.
  ☆23Updated 2 years ago
• mubix / lmo
  LetMeOutOfYour.net Resources
  ☆20Updated 4 years ago
• rangercha / tshark_extractor
  python wrapper to use tshark for file extraction from the command line.
  ☆27Updated 6 years ago