ptresearch / AttackDetection
Attack Detection
☆1,339Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for AttackDetection
- Suricata IDS rules 用来检测红队渗透/恶意行为等,支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等☆1,133Updated last year
- Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.☆896Updated 2 months ago
- Guidance for mitigation web shells. #nsacyber☆967Updated last year
- Utilities for MITRE™ ATT&CK☆1,012Updated 5 months ago
- Suricata, Snort and Zeek IDS rule and pcap testing system☆452Updated this week
- AD Security Intrusion Detection System☆1,292Updated last year
- Interesting APT Report Collection And Some Special IOC☆2,439Updated this week
- Vulmap Online Local Vulnerability Scanners Project☆950Updated last year
- A toolset to make a system look as if it was the victim of an APT attack☆2,470Updated last year
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆1,489Updated 3 years ago
- Open Source EDR for Windows☆1,152Updated last year
- Investigate malicious Windows logon by visualizing and analyzing Windows event log☆2,738Updated 5 months ago
- Utilities for Sysmon☆1,489Updated 5 months ago
- APTnotes data☆1,658Updated 3 months ago
- ☆709Updated 2 years ago
- Scirius is a web application for Suricata ruleset management and threat hunting.☆635Updated last week
- YARA signature and IOC database for my scanners and tools☆2,486Updated this week
- A tool to abuse Exchange services☆2,171Updated 5 months ago
- Simple reverse ICMP shell☆1,561Updated 6 years ago
- A Linux Auditd rule set mapped to MITRE's Attack Framework☆778Updated 4 years ago
- A Suricata based IDS/IPS/NSM distro☆1,479Updated 3 months ago
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆1,592Updated 5 years ago
- Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis…☆2,508Updated 4 months ago
- yarGen is a generator for YARA rules☆1,557Updated 5 months ago
- An information security preparedness tool to do adversarial simulation.☆1,102Updated 5 years ago
- ☆1,051Updated 5 years ago
- Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs☆718Updated 4 years ago
- By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.☆590Updated 3 years ago
- Proof of concept for CVE-2019-0708☆1,174Updated 2 years ago