Alternatives and similar repositories for crxaminer

Users that are interested in crxaminer are comparing it to the libraries listed below

• bartblaze / FARA
  Repository that contains a set of purposefully erroneous Yara rules.
  ☆51Updated last year
• krdmnbrk / atomicgen.io
  A simple tool designed to create Atomic Red Team tests with ease.
  ☆41Updated 2 months ago
• LOTTunnels / LOTTunnels.github.io
  ☆96Updated 3 weeks ago
• cudeso / proof-value-cti
  Repository documenting how Threat Intelligence and / or a Threat Intelligence Platform can prove its value to an organisation.
  ☆51Updated 6 months ago
• northsh / detection.studio
  Convert Sigma rules to SIEM queries, directly in your browser.
  ☆75Updated last week
• C0axx / CanaryHunter
  Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org
  ☆121Updated 2 years ago
• bilals12 / clusterfuck
  ☆30Updated 3 weeks ago
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆33Updated 2 weeks ago
• synacktiv / captaincredz
  CaptainCredz is a modular and discreet password-spraying tool.
  ☆109Updated last week
• LivingInSyn / RMML
  A list of RMMs designed to be used in automation to build alerts
  ☆110Updated last month
• thinkst / defending-off-the-land
  Assortment of scripts and tools for our Blackhat EU 2024 talk
  ☆92Updated 3 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆26Updated last year
• facebookincubator / ForgeArmory
  ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).
  ☆108Updated 7 months ago
• sans-blue-team / DNS-Exfiltrate
  ☆24Updated 2 years ago
• curated-intel / The-CTI-Research-Guide
  A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners
  ☆88Updated 6 months ago
• huntresslabs / rogueapps
  When good OAuth apps go rogue. Documents observed OAuth application tradecraft
  ☆75Updated last month
• nullenc0de / servicelens
  ServiceLens is a Python tool for analyzing services linked to Microsoft 365 domains. It scans DNS records like SPF and DMARC to identify …
  ☆77Updated 6 months ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆52Updated last year
• tsale / EDR-Telemetry-Website
  ☆74Updated last month
• mgreen27 / mcp-velociraptor
  VelociraptorMCP is a Model Context Protocol bridge for exposing LLMs to MCP clients.
  ☆23Updated this week
• LowOrbitSecurity / gubble
  gubble is a tool designed to audit Google Workspace group settings. It analyzes settings such as who can join, view membership, post mess…
  ☆55Updated 4 months ago
• Permiso-io-tools / capiche
  ☆17Updated 6 months ago
• Digital-Defense-Institute / triage.zip
  A preconfigured Velociraptor triage collector
  ☆51Updated last week
• Bournemouth2600 / Detection-Engineering-Intro
  An introduction to detection engineering
  ☆13Updated 4 months ago
• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆60Updated 10 months ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆81Updated last year
• nasbench / Eventlog_Compendium
  The Eventlog Compendium is the go-to resource for understanding Windows Event Logs.
  ☆41Updated 3 weeks ago
• fox-it / skrapa
  A zero dependency and customizable Python library for scanning Windows and Linux process memory.
  ☆66Updated last year
• securityjoes / Crowdstrike-Deploy
  The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.
  ☆23Updated 2 weeks ago
• op7ic / Cloud-Investigate
  A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.
  ☆39Updated last year