Splunk app to compare Endpoint Detection and Response solutions based on MITRE ATT&CK evaluations (APT3, APT29, Carbanak + FIN7, Wizard Spider + Sandworm)
☆19Sep 5, 2022Updated 4 years ago
Alternatives and similar repositories for EDRevals
Users that are interested in EDRevals are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Add-on for ingesting DMARC aggregate reports into Splunk☆15Dec 5, 2022Updated 3 years ago
- Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…☆22Dec 11, 2020Updated 5 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- A quick bash script that I created in order to speed up the creation of usable kali boxes.☆15Oct 29, 2021Updated 4 years ago
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Indicators of Compromise (IOCs) accompanying HP Threat Research blog posts and reports.☆29Apr 10, 2024Updated 2 years ago
- SqlServer Linked Password Dumper.☆17Apr 28, 2017Updated 9 years ago
- Automatically exported from code.google.com/p/softflowd☆16Jun 10, 2015Updated 11 years ago
- SSDP Service Discovery☆17Dec 16, 2018Updated 7 years ago
- Installs And Executes Shellcode☆12Jul 26, 2015Updated 11 years ago
- Finding your secret(Credential, API Key, AWS Key, Token, etc.) in your source code, files☆17Jan 26, 2026Updated 8 months ago
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated last year
- PyKafka consumer to push events to Splunk HTTP Event Collector☆17Jun 28, 2017Updated 9 years ago
- Red team oriented key finder and correlator☆20Nov 21, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of Python resources for Blue Team security work☆17Sep 23, 2018Updated 8 years ago
- Sunburst IOCs for Splunk Ingest☆17Jan 28, 2021Updated 5 years ago
- General Content☆28Jul 28, 2026Updated 2 months ago
- Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General☆24Dec 16, 2021Updated 4 years ago
- Drill down into your python logs using JSON logs stored in Splunk - supports sending over TCP or the Splunk HEC REST API handlers (using …☆13Oct 18, 2022Updated 3 years ago
- Alternative password shadowing scheme☆12Updated this week
- ☆11Feb 9, 2023Updated 3 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- My first trial at Ethical Hacking Write Ups☆23Jul 23, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Library management system using python☆11Mar 13, 2019Updated 7 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- ☆25Jun 22, 2022Updated 4 years ago
- Accompanying documentation, images, source code and other stuff from the cybernomad.online blog☆28Sep 21, 2020Updated 6 years ago
- One CTF Platform☆20Dec 4, 2019Updated 6 years ago
- 搜索几个网站的云盘资源，并过滤到失效链接，最后不保证资源的有效性☆20Jun 25, 2018Updated 8 years ago
- Splunking Crime using Splunk Machine Learning Toolkit☆11Dec 14, 2018Updated 7 years ago
- CCP, Kesha Williams, 11-5-2020☆20Jul 6, 2023Updated 3 years ago
- Model analysis tools for TensorFlow☆12Oct 27, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An example of how to spawn a process with a spoofed parent PID (Visual C++)☆29Mar 3, 2019Updated 7 years ago
- UART proxy tool for inter-chip analysis.☆24Jul 14, 2026Updated 3 months ago
- Event Query Router☆12Aug 9, 2019Updated 7 years ago
- Event Data Collector☆40Oct 9, 2026Updated last week
- SentinelOne STAR Rules☆81Feb 11, 2025Updated last year
- ChatterBot: Machine learning in Python ChatterBot ChatterBot is a machine-learning based conversational dialog engine build in Python whi…☆11Dec 18, 2019Updated 6 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago