oz9un / SysmonForLinux-Manual
This repo contains specific configuration files for better understanding of sysmon configuration on Linux systems.
☆13Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for SysmonForLinux-Manual
- Invoke-SocksProxy is a PowerShell script designed to create reverse proxies.☆45Updated 3 years ago
- Generate malicious files using recently published homoglyphic-attack (CVE-2021-42694)☆17Updated last year
- Cyber security geoip attack map that follows syslog and parses IPs/port numbers to visualize attackers in real time.☆9Updated 4 years ago
- A tool to reverse engineer and inspect the RPM and APT databases to list all the packages along with executables, service and versions.☆17Updated 6 months ago
- Automate Network sessions enumeration of connected users in the domain, to facilitate AD Reconnaissance for Adversary simulation & Red Te…☆15Updated 4 years ago
- ☆42Updated 2 years ago
- Advanced threat detection solution for Linux.☆36Updated 3 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆37Updated 4 months ago
- Simple Honeypot for Atlassian Confluence (CVE-2022-26134)☆20Updated 2 years ago
- Ideaslocas Repository☆37Updated 3 years ago
- Extracting AsyncRAT configuration using CyberChef☆12Updated 2 years ago
- A scanner that files with compromised or untrusted code signing certificates written in python.☆65Updated last year
- ☆17Updated 2 years ago
- Malware campaigns and APTs research by BlackArrow☆18Updated 4 years ago
- RustHunter is a modular incident response framework based on Rust and Ansible to build and compare environmental baselines.☆17Updated 2 years ago
- PoCs and technical analysis of three vulnerabilities found on Cisco AnyConnect for Windows: CVE-2020-3433, CVE-2020-3434 and CVE-2020-343…☆42Updated 4 years ago
- AutoPoC Generator HoneyPoC☆32Updated 4 months ago
- go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…☆46Updated last year
- Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077☆31Updated 2 years ago
- Norimaci is a simple and lightweight malware analysis sandbox for macOS☆66Updated 4 years ago
- ☆38Updated 4 years ago
- Automatically perform advanced NTLM hash relay attacks☆14Updated 2 years ago
- A repo to house files for our blogposts on blog.nviso.eu☆65Updated 2 months ago
- Is this IP a C2 server?☆28Updated 4 years ago
- Sp00fer blog post -☆25Updated 2 years ago
- Simple C2 over the Trello API☆37Updated last year
- Basic RDP honeypot script☆28Updated last year
- A little implant which SSH's back with a shell☆36Updated 2 years ago