jstrosch / FLARE-VM-configs
These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help streamline the installation.
☆13Updated 10 months ago
Alternatives and similar repositories for FLARE-VM-configs:
Users that are interested in FLARE-VM-configs are comparing it to the libraries listed below
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated last year
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆32Updated 3 months ago
- Contains compiled binaries of Volatility☆33Updated last month
- Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's☆59Updated 2 months ago
- Tools and scripts to deploy and manage OpenRelik instances☆13Updated this week
- A simple tool designed to create Atomic Red Team tests with ease.☆37Updated 2 months ago
- Scripts to for ready-to-use Velociraptor instance deployment in Azure☆13Updated last year
- ☆33Updated 3 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 2 months ago
- Create a cool process tree like https://twitter.com/ACEResponder.☆35Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- ☆14Updated 10 months ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆44Updated 2 years ago
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆13Updated 2 months ago
- Placeholder for my detection repo and misc detection engineering content☆42Updated last year
- Yara Rules for Modern Malware☆73Updated last year
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆58Updated 2 years ago
- a tiny program to consume from ETW providers for research☆46Updated last month
- ☆14Updated last year
- ☆34Updated 2 years ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆50Updated last year
- Detection rule validation☆41Updated last year
- A proof-of-concept re-assembler for reverse VNC traffic.☆25Updated last year
- Baseline a Windows System against LOLBAS☆25Updated 10 months ago
- Modular malware analysis artifact collection and correlation framework☆53Updated 10 months ago
- A collection of my yara rules☆35Updated last year
- Repo containing my public talks☆23Updated last year
- Collection of my own detection rules☆15Updated last year