Alternatives and similar repositories for Trawler:

Users that are interested in Trawler are comparing it to the libraries listed below

• vectra-ai-research / MAAD-AF
  MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
  ☆396Updated 7 months ago
• AirbusProtect / AD-Canaries
  The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…
  ☆250Updated last year
• randomaccess3 / Awesome-BEC
  Repository of attack and defensive information for Business Email Compromise investigations
  ☆251Updated 3 months ago
• gtworek / VolatileDataCollector
  ☆201Updated 6 months ago
• LETHAL-FORENSICS / Collect-MemoryDump
  Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR
  ☆238Updated last month
• MazX0p / ThreatHound
  ☆160Updated last year
• cyb3rmik3 / MDE-DFIR-Resources
  A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as …
  ☆391Updated 4 months ago
• M00NLIG7 / ChopChopGo
  Rapidly Search and Hunt through Linux Forensics Artifacts
  ☆188Updated last year
• cgosec / Blauhaunt
  A tool collection for filtering and visualizing logon events. Designed to help answering the "Cotton Eye Joe" question (Where did you com…
  ☆169Updated 2 months ago
• joeavanzato / RetrievIR
  PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
  ☆102Updated 8 months ago
• MHaggis / PowerShell-Hunter
  PowerShell tools to help defenders hunt smarter, hunt harder.
  ☆364Updated 3 weeks ago
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆163Updated this week
• layer8secure / SilentHound
  Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.
  ☆488Updated 2 years ago
• Neo23x0 / sysmon-config
  Sysmon configuration file template with default high-quality event tracing
  ☆483Updated last year
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆154Updated last year
• 3CORESec / MAL-CL
  MAL-CL (Malicious Command-Line)
  ☆312Updated 2 years ago
• NextronSystems / ransomware-simulator
  Ransomware simulator written in Golang
  ☆436Updated 2 years ago
• blackhillsinfosec / EventLogging
  Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
  ☆481Updated 5 months ago
• tsale / Sigma_rules
  Sigma rules to share with the community
  ☆120Updated 3 months ago
• pr0xylife / Qakbot
  ☆195Updated last year
• NVISOsecurity / evtx-hunter
  evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
  ☆152Updated 3 years ago
• mtth-bfft / adeleg
  Active Directory delegation management tool
  ☆296Updated last year
• secure-cake / win-mal-investigations
  Windows Malware Investigation Scripts & Docs
  ☆82Updated 6 months ago
• mttaggart / wtfbins
  WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.
  ☆165Updated last month
• mvelazc0 / msInvader
  M365/Azure adversary simulation tool that generates realistic attack telemetry to help blue teams improve their detection and response ca…
  ☆292Updated 2 months ago
• The-DFIR-Report / Sigma-Rules
  Rules generated from our investigations.
  ☆194Updated last month
• stuhli / awesome-event-ids
  Collection of Event ID ressources useful for Digital Forensics and Incident Response
  ☆612Updated 10 months ago
• idnahacks / GoodHound
  Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
  ☆463Updated 10 months ago
• CrowdStrike / SuperMem
  A python script developed to process Windows memory images based on triage type.
  ☆262Updated last year
• Yamato-Security / EnableWindowsLogSettings
  Documentation and scripts to properly enable Windows event logs.
  ☆608Updated last year