Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.
☆50Sep 1, 2023Updated 2 years ago
Alternatives and similar repositories for windows-sandbox-to-elastic
Users that are interested in windows-sandbox-to-elastic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Items related to the RedELK workshop given at security conferences☆29Sep 28, 2023Updated 2 years ago
- A Dockerized build pipeline for custom Windows x64 shellcode☆53Dec 12, 2025Updated 4 months ago
- Ansible roles to deploy RedELK☆23Feb 15, 2023Updated 3 years ago
- Simple reverse ICMP shell☆14Apr 30, 2024Updated last year
- OptionsBleed (CVE-2017-9798) PoC / Scanner☆17May 21, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆11May 17, 2024Updated last year
- A Framework to Automatically Extract Indicators of Compromise (IoCs) from Twitter☆16Dec 9, 2019Updated 6 years ago
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52May 16, 2024Updated last year
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆11Nov 24, 2023Updated 2 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Rubber Ducky powered by NeoKey☆29Jun 3, 2024Updated last year
- ☆12Apr 22, 2022Updated 3 years ago
- Build K3s image using Packer☆13Mar 31, 2026Updated 2 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Installing wazuh SIEM Unified XDR and SIEM protection☆34Jun 3, 2025Updated 10 months ago
- Small visualizator for PE files☆69Sep 20, 2023Updated 2 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆42Aug 6, 2024Updated last year
- maldev obviously☆28May 5, 2025Updated 11 months ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated 6 months ago
- MFT Fast Transcoder is a fast forensic tool to analyze MFT of NTFS partitions.☆12Feb 27, 2023Updated 3 years ago
- A script that parses PowerView's output for GPO analysis. Integrated into bloodhound to find misconfigurations of URA, SMB signing etc☆15Feb 9, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A server to connect local Obisdian instances and remote vaults with Desktop AI tools like Claude and ChatGPT Desktop☆22Oct 16, 2025Updated 6 months ago
- A collection of Cortex Analyzers and Responders for TheHive/Cortex☆13Jan 29, 2020Updated 6 years ago
- IoT Malware Similarity Analysis Platform☆45Jan 30, 2022Updated 4 years ago
- Ghidra script which fully parses COFF files☆12Oct 18, 2024Updated last year
- A continuation of my 'ferret' project that extracts useful information from networks.☆22Jul 20, 2014Updated 11 years ago
- Small enough to carry on your back (Backpack) 🎒💻☆32Jun 3, 2023Updated 2 years ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆12Oct 1, 2022Updated 3 years ago
- ☆253Jun 7, 2025Updated 10 months ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Feb 29, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Unpacker for donut shellcode☆21Jun 20, 2020Updated 5 years ago
- Passworld is a fully customizable wordlist generator☆16Sep 13, 2024Updated last year
- Accompanying documentation, images, source code and other stuff from the cybernomad.online blog☆27Sep 21, 2020Updated 5 years ago
- Malkom is an extensible and simple similarity graph generator for malware analysis aimed at helping analysts visualize and cluster sets o…☆17Apr 6, 2023Updated 3 years ago
- Patch AMSI and ETW☆251May 8, 2024Updated last year
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago
- MacOS Shared Library to Shellcode Loader☆64Feb 23, 2026Updated last month