Alternatives and similar repositories for insightvm-sql-queries

Users that are interested in insightvm-sql-queries are comparing it to the libraries listed below

• p3hndrx / B-B-Shuffle
  Dashboard for conducting Backdoors and Breaches sessions over Zoom.
  ☆117Updated last year
• activecm / threat-tools
  Tools for simulating threats
  ☆197Updated 2 years ago
• malwarejake-public / conference-presentations
  Conference presentations
  ☆60Updated last month
• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆88Updated 5 years ago
• randomaccess3 / Awesome-BEC
  Repository of attack and defensive information for Business Email Compromise investigations
  ☆269Updated 7 months ago
• ethack / tht
  Threat Hunting Toolkit is a Swiss Army knife for threat hunting, log processing, and security-focused data science
  ☆146Updated last week
• secure-cake / misc-scripts
  ☆38Updated 8 months ago
• KC7-Foundation / kc7
  A cybersecurity game in Azure Data Explorer
  ☆174Updated last year
• strandjs / ClassLabs
  ☆64Updated 4 years ago
• blackhillsinfosec / play.backdoorsandbreaches.com
  Dashboard for conducting Backdoors and Breaches sessions over Zoom.
  ☆69Updated 4 months ago
• PwC-IR / Business-Email-Compromise-Guide
  The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…
  ☆265Updated 4 years ago
• secure-cake / rapid-endpoint-investigations
  Scripts for rapid Windows endpoint "tactical triage" and investigations with Velociraptor and KAPE
  ☆172Updated last month
• Bert-JanP / SecScripts
  Security Scripts and Sources for daily usage.
  ☆67Updated 2 weeks ago
• bk-cs / rtr
  Real-time Response scripts and schema
  ☆119Updated last month
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆134Updated 4 years ago
• guardsight / gsvsoc_cybersecurity-incident-response-plan
  Cybersecurity Incident Response Plan
  ☆109Updated 5 years ago
• PwC-IR / Office-365-Extractor
  The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
  ☆264Updated 3 years ago
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆214Updated 5 years ago
• msraju / Incident-Response-Playbooks
  ☆47Updated 3 years ago
• rootsecdev / Microsoft-Blue-Forest
  Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers
  ☆265Updated last year
• MarkBaggett / pyWars
  The latest pyWars client for the SEC573 class
  ☆47Updated 8 months ago
• blackhillsinfosec / EventLogging
  Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
  ☆486Updated last year
• iknowjason / BlueCloud
  Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
  ☆143Updated 3 years ago
• halpomeranz / LinuxCmdLine
  Create lab environment for Linux Command Line course
  ☆49Updated last year
• finackninja / CSFRTR
  A collection of scripts for use with CrowdStrike Falcon RTR
  ☆17Updated last year
• FirmGuardian / backdoors-and-breaches-pcio
  A port of BHIS's Backdoors & Breaches for playingcards.io
  ☆64Updated 2 years ago
• freeload101 / CrowdStrike_RTR_Powershell_Scripts
  ☆81Updated last year
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆425Updated last year
• JSCU-NL / logging-essentials
  A Windows event logging and collection baseline focused on finding balance between forensic value and optimising retention.
  ☆290Updated 4 years ago
• hevnsnt / Awesome_Incident_Response
  Awesome Incident Response
  ☆283Updated 2 months ago