Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine
☆571Apr 10, 2026Updated 4 months ago
Alternatives and similar repositories for elastic-container
Users that are interested in elastic-container are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a tool to help operate in EDRs' blind spots☆774Dec 2, 2024Updated last year
- ForsHops☆156Mar 25, 2025Updated last year
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆234Oct 18, 2022Updated 3 years ago
- ☆169Apr 17, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆829Aug 18, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆316Updated this week
- ☆194Oct 21, 2025Updated 10 months ago
- A Mythic Agent written in PIC C.☆215Feb 4, 2025Updated last year
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆409Feb 23, 2024Updated 2 years ago
- Remote operations commands implemented using Beacon Object Files☆1,184Jul 20, 2026Updated last month
- Aims to identify sleeping beacons☆679Jan 25, 2026Updated 7 months ago
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆165Mar 1, 2024Updated 2 years ago
- ☆213Nov 28, 2023Updated 2 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆405Aug 15, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cobalt Strike BOF for evasive .NET assembly execution☆329Mar 31, 2025Updated last year
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆330May 17, 2024Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆713Jul 16, 2026Updated last month
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆330May 24, 2026Updated 3 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 5 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,899Nov 3, 2024Updated last year
- Elastic Security detection content for Endpoint☆1,484Aug 20, 2026Updated last week
- A BOF that runs unmanaged PEs inline☆702Oct 23, 2024Updated last year
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,400Mar 9, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆461Jun 27, 2025Updated last year
- EDR Lab for Experimentation Purposes☆1,555Jun 10, 2026Updated 2 months ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆361Nov 19, 2024Updated last year
- Mythic C2 Agent written in x64 PIC C☆86Jan 29, 2025Updated last year
- ☆125May 12, 2021Updated 5 years ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆276Aug 22, 2026Updated last week
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆571Oct 3, 2025Updated 10 months ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆940Jun 25, 2026Updated 2 months ago
- Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.☆643Feb 2, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An offensive data enrichment pipeline☆997Jul 31, 2026Updated last month
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆286Sep 18, 2024Updated last year
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆638Jan 2, 2025Updated last year
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆612Nov 23, 2025Updated 9 months ago
- Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.☆240Aug 24, 2026Updated last week
- Lateral movement with DCOM DLL hijacking☆183Jul 4, 2025Updated last year
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆365Aug 15, 2026Updated 2 weeks ago