packetrat / packethuntingLinks
Resources and materials for DEF CON 2018 Packet Hunting Workshop
☆79Updated 7 years ago
Alternatives and similar repositories for packethunting
Users that are interested in packethunting are comparing it to the libraries listed below
Sorting:
- No-Script Automation Tool☆56Updated 7 years ago
- SEC599 supporting GitHub repository☆16Updated 6 years ago
- Security Onion Elastic Stack☆46Updated 4 years ago
- Mitre Att&ck Technique Emulation☆82Updated 6 years ago
- A collection of infosec related scripts and information.☆53Updated 11 months ago
- Repository for Endpoint Security Testing☆35Updated 7 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆82Updated 7 years ago
- Sandbox feature upgrade with the help of wrapped samples☆76Updated 7 years ago
- Prepare, Hunt, and Respond - Conceptual model against cyber attacks by JYVSECTEC☆61Updated 3 years ago
- BTG's purpose is to make fast and efficient search on IOC☆70Updated 6 years ago
- Detecting Lateral Movement with Machine Learning☆138Updated 7 years ago
- Understanding ATT&CK Matrix for Enterprise☆80Updated 7 years ago
- A powershell script for creating a Windows honeyport.☆89Updated 5 months ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- SMTP server / sinkhole for collecting spam☆44Updated 7 years ago
- Repository for my ATT&CK analysis research.☆69Updated 6 years ago
- Generate ATT&CK Navigator layer file from PowerShell Empire agent logs☆48Updated 7 years ago
- PowerShell No Agent Hunting☆109Updated 7 years ago
- Tools for the Computer Incident Response Team☆144Updated 8 years ago
- A bunch of scripts I use to work with urlscan.io☆34Updated 5 years ago
- Splunk Boss of the SOC v1 data set.☆111Updated 7 years ago
- Development guide for Volatility Plugins☆23Updated 8 years ago
- Credential Phish Analysis and Automation☆97Updated 7 years ago
- Simulating Adversary Operations☆96Updated 7 years ago
- All materials from our Black Hat 2018 "Subverting Sysmon" talk☆134Updated 7 years ago
- Clustering NMAP XML results to help make sense of large scan results.☆33Updated 2 years ago
- Sysmon config for both Windows and Linux Devices. Windows one is a bit dated☆56Updated last year
- A few scripts I put together for testing purposes and to automate a few capabilities while doing IR. These scripts are also part of my bl…☆55Updated 7 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆106Updated 5 years ago
- ☆108Updated 8 years ago