geeksniper / Red-team-toolkitLinks
this repo is for red team process and tools collection
☆27Updated 4 years ago
Alternatives and similar repositories for Red-team-toolkit
Users that are interested in Red-team-toolkit are comparing it to the libraries listed below
Sorting:
- Placeholder for my detection repo and misc detection engineering content☆42Updated 2 years ago
- Triaging Windows event logs based on SANS Poster☆42Updated 2 months ago
- Slides from my talk at the Adversary Village, Defcon 30☆29Updated 3 years ago
- A full analysis report detailing as much as possible of a Malware or a Threat☆31Updated last year
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆18Updated 2 years ago
- ☆28Updated 4 years ago
- MS Graph Commands and Tools for Blue Teamers☆52Updated 2 years ago
- A scanner that files with compromised or untrusted code signing certificates written in python.☆65Updated 2 years ago
- Notes and IoCs of fresh malware☆59Updated last year
- MalStatWare automates malware analysis with Python. Extract key details like file size, type, hash, path, and digital signature. It analy…☆30Updated last year
- PowerShell Script Analyzer☆70Updated 2 years ago
- CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"☆51Updated 3 years ago
- CIS Benchmark testing of Windows SIEM configuration☆45Updated 2 years ago
- Files to automatically deploy red team Active Directory test lab☆48Updated 3 years ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆20Updated 2 years ago
- Bloodhound Portable for Windows☆53Updated 2 years ago
- Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…☆43Updated last year
- This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malwar…☆38Updated 9 months ago
- Baseline a Windows System against LOLBAS☆70Updated last year
- Zeroday Microsoft Exchange Server checker (Virtual Patching checker)☆67Updated 3 years ago
- ☆11Updated 3 years ago
- AutoPoC Generator HoneyPoC☆36Updated last month
- Yara Rules for Modern Malware☆78Updated last year
- ☆21Updated 2 months ago
- Detection rule validation☆40Updated 2 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- A Repository to Track Anti-Forensic Techniques☆118Updated 2 years ago
- General Content☆25Updated last month
- Documentation and tools to curate Sigma rules for Windows event logs into easier to parse rules.☆16Updated 3 months ago
- Awesome list of Living off the Land (LOL) methods, tools, and features commonly abused by attackers☆34Updated 9 months ago