palantir / phishcatch
A browser extension and API server for detecting corporate password use on external websites
☆91Updated last month
Alternatives and similar repositories for phishcatch:
Users that are interested in phishcatch are comparing it to the libraries listed below
- Pushes Sysmon Configs☆89Updated 3 years ago
- Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop☆57Updated this week
- A PowerShell incident response script for quick triage☆78Updated 2 years ago
- A collection of Powershell scripts that will help automate the build process for a Marvel domain.☆144Updated 10 months ago
- MDE relies on some of the Audit settings to be enabled☆97Updated 2 years ago
- Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity☆89Updated 2 years ago
- Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.☆128Updated 2 years ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆64Updated 11 months ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆110Updated last year
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 2 years ago
- PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.☆64Updated last month
- CSIRT Jump Bag☆27Updated 8 months ago
- A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments☆64Updated 2 years ago
- ☆85Updated 11 months ago
- Python library for threat intelligence☆81Updated this week
- This repo is where I store my Threat Hunting ideas/content☆86Updated last year
- ☆25Updated 2 years ago
- Microsoft Threat Protection Advance Hunting Cheat Sheet☆78Updated 4 years ago
- RRR (Rapid Response Reporting) is a collection of Incident Response Report objects. They are designed to help incident responders provid…☆36Updated 2 years ago
- Active Directory Purple Team Playbook☆105Updated last year
- Notes on responding to security breaches relating to Azure AD☆97Updated 2 years ago
- Community Tasks/Plans for PlumHound Queueing☆23Updated last year
- My conference presentations☆66Updated last year
- Full of public notes and Utilities☆94Updated last month
- Kerberoast Detection Script☆30Updated 2 months ago
- ☆45Updated 2 weeks ago
- ☆68Updated 3 years ago
- List of PowerShell commands and commandlets that should be in your Powershel watchlist☆38Updated 3 years ago
- Recon Hunt Queries☆76Updated 3 years ago