Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine
☆572Apr 10, 2026Updated 5 months ago
Alternatives and similar repositories for elastic-container
Users that are interested in elastic-container are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- a tool to help operate in EDRs' blind spots☆775Dec 2, 2024Updated last year
- ForsHops☆156Mar 25, 2025Updated last year
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆233Oct 18, 2022Updated 3 years ago
- ☆166Apr 17, 2024Updated 2 years ago
- Windows protocol library, including SMB and RPC implementations, among others.☆834Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆317Aug 31, 2026Updated 2 weeks ago
- ☆193Oct 21, 2025Updated 10 months ago
- A Mythic Agent written in PIC C.☆216Feb 4, 2025Updated last year
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆413Feb 23, 2024Updated 2 years ago
- Remote operations commands implemented using Beacon Object Files☆1,186Jul 20, 2026Updated 2 months ago
- Aims to identify sleeping beacons☆680Jan 25, 2026Updated 7 months ago
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆163Mar 1, 2024Updated 2 years ago
- ☆211Nov 28, 2023Updated 2 years ago
- Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory☆405Aug 15, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cobalt Strike BOF for evasive .NET assembly execution☆326Mar 31, 2025Updated last year
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆330May 17, 2024Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆712Sep 9, 2026Updated last week
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆331Sep 7, 2026Updated last week
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 5 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,902Nov 3, 2024Updated last year
- TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts☆1,403Mar 9, 2026Updated 6 months ago
- Elastic Security detection content for Endpoint☆1,494Updated this week
- A BOF that runs unmanaged PEs inline☆702Oct 23, 2024Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆463Jun 27, 2025Updated last year
- EDR Lab for Experimentation Purposes☆1,561Jun 10, 2026Updated 3 months ago
- Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.☆650Feb 2, 2026Updated 7 months ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆361Nov 19, 2024Updated last year
- Mythic C2 Agent written in x64 PIC C☆85Jan 29, 2025Updated last year
- ☆125May 12, 2021Updated 5 years ago
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆315Aug 22, 2026Updated 3 weeks ago
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆571Oct 3, 2025Updated 11 months ago
- An offensive data enrichment pipeline☆997Jul 31, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆285Sep 18, 2024Updated 2 years ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆947Jun 25, 2026Updated 2 months ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆640Jan 2, 2025Updated last year
- A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.☆239Updated this week
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆614Nov 23, 2025Updated 9 months ago
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆364Aug 15, 2026Updated last month
- Lateral movement with DCOM DLL hijacking☆183Jul 4, 2025Updated last year