Splunk app to compare Endpoint Detection and Response solutions based on MITRE ATT&CK evaluations (APT3, APT29, Carbanak + FIN7, Wizard Spider + Sandworm)
☆19Sep 5, 2022Updated 3 years ago
Alternatives and similar repositories for EDRevals
Users that are interested in EDRevals are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Add-on for ingesting DMARC aggregate reports into Splunk☆15Dec 5, 2022Updated 3 years ago
- Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…☆22Dec 11, 2020Updated 5 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- A quick bash script that I created in order to speed up the creation of usable kali boxes.☆14Oct 29, 2021Updated 4 years ago
- Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.☆28Apr 10, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- SSDP Service Discovery☆17Dec 16, 2018Updated 7 years ago
- Installs And Executes Shellcode☆12Jul 26, 2015Updated 11 years ago
- Finding your secret(Credential, API Key, AWS Key, Token, etc.) in your source code, files☆17Jan 26, 2026Updated 6 months ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated 11 months ago
- PyKafka consumer to push events to Splunk HTTP Event Collector☆17Jun 28, 2017Updated 9 years ago
- Red team oriented key finder and correlator☆20Nov 21, 2025Updated 8 months ago
- Sunburst IOCs for Splunk Ingest☆17Jan 28, 2021Updated 5 years ago
- C# DCOM Execution☆18Aug 4, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- General Content☆28Jul 28, 2026Updated 2 weeks ago
- ☆15Jul 20, 2022Updated 4 years ago
- Drill down into your python logs using JSON logs stored in Splunk - supports sending over TCP or the Splunk HEC REST API handlers (using …☆13Oct 18, 2022Updated 3 years ago
- ☆11Feb 9, 2023Updated 3 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- My first trial at Ethical Hacking Write Ups☆23Jul 23, 2020Updated 6 years ago
- Library management system using python☆11Mar 13, 2019Updated 7 years ago
- ☆25Jun 22, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Accompanying documentation, images, source code and other stuff from the cybernomad.online blog☆28Sep 21, 2020Updated 5 years ago
- One CTF Platform☆20Dec 4, 2019Updated 6 years ago
- CCP, Kesha Williams, 11-5-2020☆20Jul 6, 2023Updated 3 years ago
- Model analysis tools for TensorFlow☆12Oct 27, 2019Updated 6 years ago
- An example of how to spawn a process with a spoofed parent PID (Visual C++)☆29Mar 3, 2019Updated 7 years ago
- UART proxy tool for inter-chip analysis.☆24Jul 14, 2026Updated last month
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- 一个常用编码加解密的懒人工具，自动识别，尝试转换所有类型，包括html实体化，base64，base32，32位md5，16位md5，hash，\x,0x等十六进制格式,url编码...☆15Feb 1, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection☆33Oct 7, 2020Updated 5 years ago
- A set of Splunk workflow action definitions to export field values to CyberChef for further analysis.☆13Jan 22, 2018Updated 8 years ago
- Small example on how you can detect multicollinearity☆13May 29, 2021Updated 5 years ago
- ☆42Dec 22, 2020Updated 5 years ago
- This is a scripted input that reads one or more logs from Salesforce Commerce Cloud (SFCC) into Splunk. This script can be configured to …☆11Mar 12, 2019Updated 7 years ago
- ☆10May 18, 2019Updated 7 years ago
- An RansomWare Android app☆10May 18, 2018Updated 8 years ago