mthcht / PurpleteamLinks
Purpleteam scripts simulation & Detection - trigger events for SOC detections
☆192Updated last year
Alternatives and similar repositories for Purpleteam
Users that are interested in Purpleteam are comparing it to the libraries listed below
Sorting:
- A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.☆162Updated 9 months ago
- The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…☆126Updated last year
- A collection of CVEs weaponized by ransomware operators☆129Updated 3 months ago
- Repository for sharing examples of our artifacts data and for use in new analyst recruitment.☆108Updated 9 months ago
- CarbonBlack EDR detection rules and response actions☆73Updated last year
- Sigma rules to share with the community☆123Updated last year
- Some Threat Hunting queries useful for blue teamers☆131Updated 3 years ago
- MISP Playbooks☆222Updated 3 months ago
- A collection of companies that disclose adversary TTPs after they have been breached☆289Updated 2 months ago
- Online resources related to Detection Engineering. Detection rules, detection logic, attack samples, detection tests and emulation tools…☆141Updated 2 months ago
- A repository to help CTI teams tackle the challenges around collection and research by providing guidance from experienced practitioners☆115Updated last year
- MAD ATT&CK Defender: ATT&CK Adversary Emulation Repository☆127Updated 2 years ago
- ThreatSeeker: Threat Hunting via Windows Event Logs☆124Updated 2 years ago
- A repository of my own Sigma detection rules.☆163Updated 2 months ago
- A collection of various SIEM rules relating to malware family groups.☆70Updated last year
- Harness the power of Splunk for your investigations☆148Updated 3 months ago
- Raw data from Threat Intelligence Reports with automatic reports collection and keyword search across thousands of reports☆148Updated this week
- An automated Adversary Emulation lab with terraform and MCP server. Build Caldera techniques and operations assisted with LLMs. Built f…☆204Updated 2 months ago
- A repository to share publicly available Velociraptor detection content☆194Updated this week
- Full of public notes and Utilities☆130Updated 3 weeks ago
- The Threat Actor Profile Guide for CTI Analysts☆116Updated 2 years ago
- An open-source self-hosted purple team management web application.☆300Updated this week
- Repository of attack and defensive information for Business Email Compromise investigations☆274Updated 8 months ago
- The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory C…☆258Updated 2 years ago
- God Mode Detection Rules☆135Updated last year
- MITRE ATT&CK mapped queries for SentinelOne Deep Visiblity☆92Updated 5 years ago
- ☆160Updated 2 years ago
- Building a consolidated RSS feed for articles about cyberattacks☆73Updated last week
- yara detection rules for hunting with the threathunting-keywords project☆157Updated 8 months ago
- Mapping of open-source detection rules and atomic tests.☆193Updated last year