A comprehensive PowerShell-based threat hunting and incident response framework for Windows environments, built around Sysmon event analysis and forensic investigation capabilities.
☆59Jul 17, 2025Updated last year
Alternatives and similar repositories for Garuda-framework
Users that are interested in Garuda-framework are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 3 months ago
- Convert Sigma rules to SIEM queries, directly in your browser.☆123Aug 19, 2026Updated 3 weeks ago
- Public exploits☆16May 28, 2018Updated 8 years ago
- A fast vulnerability scanner for package dependencies☆16Jul 22, 2026Updated last month
- This is the facade for installation and access to the individual components☆16Apr 8, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A phase-aware multi-model ML framework emulating adversarial behavior across the Cyber Kill Chain using MITRE ATT&CK. ATTACK-BERT maps te…☆17Apr 10, 2026Updated 5 months ago
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 10 months ago
- WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital s…☆120Sep 3, 2026Updated last week
- PacketSled's Bro AMQP Writer Plugin☆11Aug 5, 2016Updated 10 years ago
- Browser-based Android security auditing tool.☆82Aug 7, 2026Updated last month
- ☆34Oct 24, 2025Updated 10 months ago
- Blackdagger is a DAG based automation tool specifically used in DevOps, DevSecOps, MLOps, MLSecOps, and Continuous Red Teaming (CART).☆119Jun 21, 2026Updated 2 months ago
- Collection of videos of Raids on Cybercriminals☆22Mar 19, 2025Updated last year
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- From Patch to PoC☆32Nov 19, 2025Updated 9 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆234Mar 28, 2025Updated last year
- Fly into Gophish with One Click (Infra Automation)☆53Mar 30, 2023Updated 3 years ago
- Browser based Privacy Aware SBoM Exploration☆37Updated this week
- ☆30Aug 22, 2019Updated 7 years ago
- Cyber Threat Intelligence Capability Maturity Model (CTI-CMM), a dedicated maturity framework to empower your team. Inspired by industry …☆49Jun 3, 2026Updated 3 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆34Feb 17, 2026Updated 6 months ago
- mod to myaut2exe decompiler☆20Jul 28, 2017Updated 9 years ago
- macOS .DS_Store Parser☆81Aug 17, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Windows Scripts☆12Apr 2, 2020Updated 6 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing☆19Feb 4, 2022Updated 4 years ago
- Pool Overflow in OpenVpn NDIS TAP Driver☆17Nov 3, 2015Updated 10 years ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆49Oct 24, 2025Updated 10 months ago
- ECED440 Computer Security☆11Apr 6, 2026Updated 5 months ago
- List of URL shortener websites☆18Mar 18, 2025Updated last year
- A Python script for indexing (putting) FireEye alert data into Elasticsearch...and notifying you too.☆16Dec 11, 2018Updated 7 years ago
- ☆13Apr 8, 2022Updated 4 years ago
- TTPMapper is an AI-driven threat intelligence parser that converts unstructured reports whether from web URLs or PDF files into structure…☆58Jun 21, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Meeting notes☆14Apr 5, 2016Updated 10 years ago
- This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.☆35Jul 8, 2019Updated 7 years ago
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 8 months ago
- R interface to the Censys "cyber"/scans search engine • https://www.censys.io/tutorial☆14Aug 9, 2022Updated 4 years ago
- VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/def…☆14Aug 11, 2020Updated 6 years ago
- Critical Success Factor (CSF) tutorial☆20Apr 14, 2025Updated last year
- ☆14Feb 10, 2021Updated 5 years ago