Alternatives and similar repositories for Hornets-Nest

Users that are interested in Hornets-Nest are comparing it to the libraries listed below

• OTRF / SimuLand
  Cloud Templates and scripts to deploy mordor environments
  ☆129Updated 4 years ago
• johnfranolich / Hunting-Scripts
  A collection of hunting and blue team scripts. Mostly others, some my own.
  ☆38Updated 2 years ago
• DefensiveOrigins / ps-whitenoiseweb
  Powershell - web traffic whitenoise generator
  ☆47Updated 4 years ago
• xenoscr / atomiccaldera
  A MITRE Caldera plugin written in Python 3 used to convert Red Canary Atomic Red Team Tests to MITRE Caldera Stockpile YAML ability files…
  ☆71Updated 3 years ago
• secprentice / PowerShellWatchlist
  List of PowerShell commands and commandlets that should be in your Powershel watchlist
  ☆37Updated 3 years ago
• HASecuritySolutions / LogCampaign
  Provides detection capabilities and log conversion to evtx or syslog capabilities
  ☆53Updated 2 years ago
• olafhartong / TA-Sysmon-deploy
  Deploy and maintain Symon through the Splunk Deployment Sever
  ☆31Updated 4 years ago
• wadingthrulogs / Talks
  All my slides for any talks
  ☆23Updated 7 months ago
• sans-blue-team / sec555-wiki
  ☆77Updated 5 years ago
• Foundstone / ExpertInvestigationGuides
  Expert Investigation Guides
  ☆51Updated 4 years ago
• clong / detect-responder
  ☆76Updated 6 years ago
• fugawi / mate
  Mitre Att&ck Technique Emulation
  ☆82Updated 6 years ago
• vysecurity / ATT-CK_Analysis
  Repository for my ATT&CK analysis research.
  ☆69Updated 6 years ago
• P4T12ICK / Sigma-Hunting-App
  A Splunk App containing Sigma detection rules, which can be updated from a Git repository.
  ☆110Updated 5 years ago
• polrbearproject / polrbear
  The PoLRBear Project
  ☆35Updated 4 years ago
• olafhartong / Presentations
  My conference presentations
  ☆66Updated last year
• OTRF / Set-AuditRule
  Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity
  ☆91Updated 3 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆93Updated 7 years ago
• timfrazier1 / AdversarySimulation
  Compilation of resources to help with Adversary Simulation automation harness
  ☆100Updated 4 years ago
• bromiley / olaf
  Office365 Log Analysis Framework
  ☆82Updated 5 years ago
• jokezone / Update-Sysmon
  This repository was created to aid in the deployment/maintenance of the Sysmon service on a large number of computers.
  ☆82Updated 2 years ago
• littl3field / Audix
  Audix is a PowerShell tool to quickly configure the Windows Event Audit Policies for security monitoring
  ☆117Updated 5 years ago
• MHaggis / CBR-Queries
  Collection of useful, up to date, Carbon Black Response Queries
  ☆83Updated 4 years ago
• fullmetalcache / domainGain-dep
  Helps with finding and registering categorized domains
  ☆70Updated 4 years ago
• activecm / threat-hunting-labs
  Collection of walkthroughs on various threat hunting techniques
  ☆75Updated 4 years ago
• krakow2600 / atomic-threat-coverage
  The project was moved here https://github.com/atomic-threat-coverage/atomic-threat-coverage
  ☆24Updated 5 years ago
• dstaulcu / TA-Sigma-Searches
  A Splunk app with saved reports derived from Sigma rules
  ☆73Updated 7 years ago
• sensepost / notruler
  The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.
  ☆94Updated 7 years ago
• curi0usJack / ADImporter
  Credit to Helge Klein - https://helgeklein.com/blog/2015/02/creating-realistic-test-user-accounts-active-directory/
  ☆69Updated 7 years ago
• remg427 / TA-thehive
  Splunk TA for alert action to TheHive-project
  ☆11Updated 5 years ago