op7ic / Cloud-Investigate
A preconfigured Windows-based system designed for rapid forensic investigations in both Azure and AWS.
☆39Updated last year
Alternatives and similar repositories for Cloud-Investigate:
Users that are interested in Cloud-Investigate are comparing it to the libraries listed below
- Baseline a Windows System against LOLBAS☆26Updated last year
- ☆21Updated 2 years ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆23Updated last week
- Quick ESXi Log Parser☆19Updated 3 months ago
- This Repository gives the best and possible strategies against hunting the ransomware☆26Updated 2 years ago
- ☆47Updated 3 weeks ago
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆19Updated last year
- Track progress and keep notes while working through likethecoins' CTI Self Study Plan☆28Updated 2 years ago
- ReWrite of AChoir in Go for Cross Platform☆41Updated 2 months ago
- ☆33Updated last year
- Contains compiled binaries of Volatility☆33Updated 3 months ago
- A tool for fetching DFIR and other GitHub tools.☆23Updated this week
- Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on☆81Updated last year
- Tools and scripts to deploy and manage OpenRelik instances☆13Updated 2 months ago
- ☆29Updated 4 years ago
- This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their …☆26Updated 5 months ago
- Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…☆38Updated last year
- ☆21Updated 3 months ago
- Random tips and tricks RE: ransomware☆14Updated 3 years ago
- Bloodhound Portable for Windows☆51Updated 2 years ago
- Forensics artifacts collection☆19Updated 3 years ago
- Get-MiniTimeline - Triage Collection and Timeline Generation w/ KAPE☆31Updated 11 months ago
- This project is an Ansible Role to execute Atomic Red Team tests against multiple machines by wrapping Invoke-AtomicRedTeam☆27Updated 10 months ago
- Sigma detection rules for hunting with the threathunting-keywords project☆55Updated 2 months ago
- Placeholder for my detection repo and misc detection engineering content☆43Updated last year
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Updated 3 months ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 5 months ago
- This repository contains sample log data that were collected after running adversary simulations in Microsoft 365☆20Updated 6 months ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆36Updated last year
- User Feedback Space of #MitreAssistant☆37Updated last year