Old home of LimaCharlie, open source EDR
☆32Sep 4, 2023Updated 2 years ago
Alternatives and similar repositories for limacharlie
Users that are interested in limacharlie are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Cumulonimbus-UAL_Extractor is a PowerShell based tool created by the Tesorion CERT team to help gather the Unified Audit Logging out of a…☆21Oct 25, 2023Updated 2 years ago
- Virustotal Data to Timesketch☆16Feb 28, 2019Updated 7 years ago
- Easy & Flexible Alerting With ElasticSearch☆19Dec 18, 2015Updated 10 years ago
- CASCADE Server☆274Dec 8, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago
- Check IOC provided by a MISP instance on Suricata events☆18Jun 4, 2019Updated 7 years ago
- Threat Hunter's Knowledge Base☆23Dec 27, 2021Updated 4 years ago
- A content inspecting SMTP proxy☆17Jun 9, 2014Updated 12 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 3 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆14Feb 1, 2022Updated 4 years ago
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- Valhalla API Client☆77Jul 14, 2026Updated 2 weeks ago
- An Installation Script for Bro IDS on Debian Based Systems☆20Jun 25, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Proof of concept incident response demo using SSM and AWS Fargate.☆15Dec 5, 2019Updated 6 years ago
- Django web interface for managing Yara rules☆196Jul 28, 2018Updated 8 years ago
- Expert Investigation Guides☆50Mar 18, 2021Updated 5 years ago
- ☆351Mar 19, 2021Updated 5 years ago
- No-Script Automation Tool☆56Aug 6, 2018Updated 7 years ago
- Bro scripts for the ROCK platform. http://rocknsm.io☆34Jul 2, 2023Updated 3 years ago
- A RESTful API frontend for Stenographer☆54Dec 7, 2022Updated 3 years ago
- Silk File Reader☆14Mar 9, 2022Updated 4 years ago
- PortPlow is a distributed port and system scanning & enumeration service. It enables the quick and automated enumeration of ports and ser…☆57Nov 19, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- How to Zeek Sysmon Logs!☆102Feb 12, 2022Updated 4 years ago
- A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.☆15May 28, 2019Updated 7 years ago
- string/file/shellcode encryptor using AES/XOR☆11Oct 15, 2023Updated 2 years ago
- Splunk integration with MISP☆11Apr 14, 2018Updated 8 years ago
- Plattform to develop and experiment with existing java web attacks.☆32Jan 8, 2018Updated 8 years ago
- iOS Snapchat parser for chats and cached files☆21Aug 25, 2022Updated 3 years ago
- A Search command to explore Elasticsearch data within Splunk.☆39Sep 14, 2018Updated 7 years ago
- cisco-auditing-tool : Scans cisco routers for common vulnerabilities☆15Sep 21, 2015Updated 10 years ago
- Endpoint monitoring stack.☆20Nov 5, 2015Updated 10 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Next major release of sniffMyPackets - Now with added packet loving☆12Mar 19, 2015Updated 11 years ago
- Yara rules I've written☆10Dec 9, 2015Updated 10 years ago
- Generates visualizations from the output of flow tools such as SiLK.☆33Dec 8, 2016Updated 9 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- Incident Response Triage - Windows Evidence Collection for Forensic Analysis☆139Apr 21, 2016Updated 10 years ago
- A systemd-enabled Kali Linux Docker image, in the spirit of geerlingguy/docker-debian11-ansible.☆15Jun 22, 2026Updated last month
- A Multi-Threaded PE Export Collection Utility☆14May 13, 2023Updated 3 years ago