Alternatives and similar repositories for mandiant_managed_hunting

Users that are interested in mandiant_managed_hunting are comparing it to the libraries listed below

• mandiant / DFUR-Splunk-App
  The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.
  ☆13Updated 5 years ago
• sans-blue-team / sec555-mdwiki-v1
  ☆11Updated 4 years ago
• mandiant / pulsesecure_exploitation_countermeasures
  ☆23Updated 2 years ago
• BushidoUK / MITRE-Mappings
  A public repository of MITRE ATT&ACK TTP mappings by BushidoUK for OSINT reports that lack a section breaking down the TTPs.
  ☆28Updated 9 months ago
• threathunters-io / QLOG
  Windows Security Logging
  ☆43Updated 3 years ago
• TheCyberViking / CoverStory
  A cover story generator for people who Need Quick Covers On Operations
  ☆13Updated 5 years ago
• tsale / BlueSploit
  BlueSploit is a DFIR framework with the main purpose being to quickly capture artifacts for later review.
  ☆32Updated 5 years ago
• mandiant / goauditparser
  ☆46Updated 2 years ago
• Bert-JanP / Domain-Response
  Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…
  ☆50Updated 3 months ago
• elastic / sans-dfir-2022
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Updated 10 months ago
• yasser-alghamdi / winterfell-hunt
  Winterfell hunt is a python script to perform auto threat hunting for malicious activities in windows OS based on collected data by winte…
  ☆15Updated 5 years ago
• shabarkin / pointer
  Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.
  ☆68Updated 3 years ago
• curated-intel / attack-lookup
  A MITRE ATT&CK Lookup Tool
  ☆46Updated last year
• gmagklaras / POFR
  Penguin OS Forensic (or Flight) Recorder
  ☆41Updated 11 months ago
• blacklanternsecurity / sigma-rules
  A collection of Sigma rules organized by MITRE ATT&CK technique
  ☆18Updated 4 years ago
• chaitanyakrishna / IOCScraper
  IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.
  ☆35Updated 3 years ago
• 3CORESec / Automata
  Automatic detection engineering technical state compliance
  ☆55Updated last year
• QueenSquishy / Zombie
  General Content
  ☆25Updated last month
• nccgroup / Threat-Intelligence-Alerts
  Welcome to the NCC Group Threat Intelligence Alert repo, here you will find the alerts which we have raised to our customers regarding in…
  ☆25Updated 2 years ago
• pr0xylife / IcedID
  ☆31Updated 2 years ago
• mlgualtieri / PurpleTeamSummit
  ☆28Updated 4 years ago
• WithSecureLabs / FLAIR
  F-Secure Lightweight Acqusition for Incident Response (FLAIR)
  ☆16Updated 4 years ago
• mitre / training
  A CALDERA plugin
  ☆26Updated this week
• Symantec / threathunters
  ☆29Updated 11 months ago
• keydet89 / IWSBook
  Site for IWS book content
  ☆17Updated 7 years ago
• NVISOsecurity / nviso-cti
  ☆44Updated 5 months ago
• svch0stz / velociraptor-detections
  ☆22Updated 2 years ago
• n3l5 / irMempull
  PowerShell Memory Pulling script
  ☆19Updated 10 years ago
• CronUp / Malware-IOCs
  ☆96Updated 7 months ago
• RedSiege / GPPDeception
  This script generates a groups.xml file that mimics a real GPP to create a new user on domain-joined computers
  ☆46Updated 5 years ago