mitre / adversaryLinks
A CALDERA plugin
☆18Updated 5 years ago
Alternatives and similar repositories for adversary
Users that are interested in adversary are comparing it to the libraries listed below
Sorting:
- ☆20Updated 8 years ago
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Updated 4 years ago
- See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)☆105Updated 2 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆35Updated 6 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Updated 2 years ago
- This is a repository that is meant to hold detections for various process injection techniques.☆34Updated 5 years ago
- SilkETW & SilkService☆40Updated 6 years ago
- A repo to document API functions mapped to security events across diverse platforms☆74Updated 6 years ago
- Bunch of honey related items that spoof/decoy powersploit functions.☆18Updated 5 years ago
- Attack Tool Timing and Reporting - Structured Attack Logging Format☆22Updated 3 years ago
- OSSEM Modular☆27Updated 5 years ago
- A list of IOCs applicable to PoshC2☆24Updated 5 years ago
- A CALDERA plugin for ATT&CK Evaluations Round 1☆33Updated 2 years ago
- Powershell / C# based cross platform forensic framework based for live incident response☆23Updated 5 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆100Updated 5 years ago
- Standardized Malware Analysis Tool☆56Updated 4 years ago
- C# User Simulation☆33Updated 3 years ago
- Parsing MITRE EDR Evaluation results☆12Updated 7 years ago
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆55Updated 7 years ago
- Detect possible sysmon logging bypasses given a specific configuration☆110Updated 7 years ago
- Repository of all the sites related to infosec IP/Domain/Hash/SSL/etc OSINT and eventually will include more.☆69Updated 2 months ago
- Utility for parsing Bro log files into CSV or JSON format☆42Updated 3 years ago
- PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpo…☆51Updated 6 years ago
- ☆48Updated 5 years ago
- Mapping your datasources and detections to the MITRE ATT&CK Navigator framework.☆58Updated 5 years ago
- Mitre Att&ck Technique Emulation☆82Updated 6 years ago
- Assorted, MIT licensed, threat hunting rules from @bradleyjkemp☆14Updated 3 years ago
- A CALDERA plugin☆79Updated 2 months ago
- Presentation materials for talks I've given.☆20Updated 6 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆30Updated 4 years ago