lucky-luk3 / Infosec_Notebooks

Related projects: ⓘ

• svch0stz / TheThreatHuntLibrary
  Library of threat hunts to get any user started!
  ☆40Updated 4 years ago
• BinaryDefense / YaraMemoryScanner
  Simple PowerShell script to enable process scanning with Yara.
  ☆86Updated last year
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆22Updated 4 months ago
• mlgualtieri / PurpleTeamSummit
  ☆25Updated 3 years ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆43Updated 11 months ago
• thremulation-station / thremulation-station
  Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
  ☆34Updated 9 months ago
• NextronSystems / evtx-baseline
  A repository hosting example goodware evtx logs containing sample software installation and basic user interaction
  ☆66Updated 10 months ago
• ashwin-patil / threat-hunting-with-notebooks
  Repository with Sample threat hunting notebooks on Security Event Log Data Sources
  ☆57Updated last year
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆85Updated last year
• nasbench / C2-Matrix-Indicators
  This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix
  ☆72Updated 2 years ago
• CrowdStrike / xwf-yara-scanner
  ☆84Updated 7 months ago
• agreenjay / sysmon
  A collection of useful PowerShell tools to collect, organize, and visualize Sysmon event data
  ☆40Updated 4 years ago
• target / Threat-Hunting
  Detection of obfuscated Powershell commands
  ☆53Updated last year
• DefensiveOrigins / DO-LAB
  ☆42Updated 3 months ago
• AbdulRhmanAlfaifi / Rhaegal
  Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…
  ☆39Updated last year
• Antonlovesdnb / SANSTHS2021
  Hunting Malicious Macros SANS Threathunting Summit 2021 Materials
  ☆40Updated 2 years ago
• SecurityRiskAdvisors / indexes
  Test case indexes
  ☆35Updated 2 months ago
• CIRCL / factual-rules-generator
  Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.
  ☆74Updated 2 years ago
• svch0stz / velociraptor-detections
  ☆19Updated last year
• blacklanternsecurity / sigma-rules
  A collection of Sigma rules organized by MITRE ATT&CK technique
  ☆15Updated 3 years ago
• secprentice / PowerShellWatchlist
  List of PowerShell commands and commandlets that should be in your Powershel watchlist
  ☆37Updated 3 years ago
• XForceIR / SideLoadHunter
  ☆20Updated 2 years ago
• jwillyamz / ezEmu
  See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
  ☆102Updated last year
• dfir-ronin / APT-OpenIOC-Detection-Rules
  This repository contains OpenIOC rules to aid in hunting for indicators of compromise and TTPs focused on Advanced Persistent Threat grou…
  ☆22Updated 11 months ago
• MHaggis / ShellSweep
  ShellSweeping the evil.
  ☆49Updated 3 months ago
• DCScoder / ESXiTri
  ESXi Cyber Security Incident Response Script
  ☆19Updated 2 weeks ago
• thetanz / csfalcon
  ☆34Updated this week
• The-DFIR-Report / cyberchef-recipes
  ☆18Updated 2 years ago
• edelucia / rules
  Cyber Threats Detection Rules
  ☆13Updated last week