giMini / NOAHLinks
PowerShell No Agent Hunting
☆110Updated 7 years ago
Alternatives and similar repositories for NOAH
Users that are interested in NOAH are comparing it to the libraries listed below
Sorting:
- This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.☆22Updated 7 years ago
- Sysmon configuration☆65Updated 7 years ago
- ☆36Updated 9 years ago
- InvestigationPlaybookSpec☆72Updated 8 years ago
- IR-Tools - PowerShell tools for IR☆130Updated 8 years ago
- SEC599 supporting GitHub repository☆16Updated 6 years ago
- Invoke-LiveResponse☆149Updated 3 years ago
- A powershell script for creating a Windows honeyport.☆91Updated 8 months ago
- Reconstruct process trees from event logs☆147Updated 5 years ago
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆166Updated 7 years ago
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆177Updated 4 years ago
- Python script to decode common encoded PowerShell scripts☆217Updated 7 years ago
- A Splunk app with saved reports derived from Sigma rules☆73Updated 7 years ago
- A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…☆73Updated 4 years ago
- CB API scripts for IR, administration, etc.☆32Updated 6 years ago
- PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.☆51Updated 7 years ago
- Maps process creation logged by Sysmon uses Google Org Chart API☆23Updated 9 years ago
- Expert Investigation Guides☆51Updated 4 years ago
- Parser for Windows PowerShell script block logs☆100Updated last year
- PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.☆58Updated 3 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 8 years ago
- Primary data pipelines for intrusion detection, security analytics and threat hunting☆85Updated 3 years ago
- Sysmon Splunk App☆47Updated 7 years ago
- Integrating Sysinternals Autoruns’ logs into Security Onion☆31Updated last year
- Tools for the Computer Incident Response Team☆148Updated 8 years ago
- Extract common Windows artifacts from source images and VSCs☆63Updated 4 years ago
- ☆108Updated 8 years ago
- Theat hunting notes in flat file format and mapped to MITRE's ATT&CK IDs☆43Updated 7 years ago
- Office365 Log Analysis Framework☆81Updated 6 years ago
- Repository for my ATT&CK analysis research.☆70Updated 6 years ago