mandiant / brickstorm-scannerLinks
☆50Updated this week
Alternatives and similar repositories for brickstorm-scanner
Users that are interested in brickstorm-scanner are comparing it to the libraries listed below
Sorting:
- 🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.☆78Updated 5 months ago
- MS Graph Commands and Tools for Blue Teamers☆50Updated last year
- orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them☆34Updated 3 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆54Updated 10 months ago
- ☆26Updated 2 years ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆61Updated this week
- ☆74Updated last week
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆34Updated last year
- Extracting IoC data from eMail☆139Updated 2 months ago
- ASR Configurator, Essentials and Atomic Testing☆94Updated 5 months ago
- Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…☆49Updated last month
- Linux Baseline and Forensic Triage Tool - BETA☆57Updated 3 years ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆125Updated last year
- Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group☆86Updated 8 months ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17Updated 4 months ago
- Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.☆18Updated last month
- Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.☆52Updated 11 months ago
- Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.☆62Updated last year
- ☆53Updated last month
- Convert a variety of log formats to CSV while enriching detected IPs with Geolocation, ASN, DNS, WhoIs, Shodan InternetDB and Threat Indi…☆109Updated 11 months ago
- God Mode Detection Rules☆134Updated last year
- Slides of my public talks☆56Updated last year
- DShield Sensor Log Collection with ELK☆40Updated last week
- CyberChef - Detection Engineering, TI, DFIR, Malware Analysis Edition☆66Updated 3 years ago
- Detection rule validation☆41Updated last year
- A list of RMMs designed to be used in automation to build alerts☆113Updated 5 months ago
- ☆50Updated last month
- A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System inc…☆73Updated this week
- SECurityTr8Ker monitors the SEC's RSS feed for 8-K filings with cybersecurity incident disclosures.☆86Updated 3 months ago
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆157Updated 6 months ago