Purple Team Security
☆74Mar 24, 2022Updated 4 years ago
Alternatives and similar repositories for Hornets-Nest
Users that are interested in Hornets-Nest are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bunch of honey related items that spoof/decoy powersploit functions.☆17Apr 23, 2020Updated 6 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- Lateral Movement graph for Azure Active Directory☆127Dec 8, 2022Updated 3 years ago
- Scripts to threat optics stack quickly / abbreviated and automated. Run after APT-Lab-Terraform☆13Oct 24, 2020Updated 6 years ago
- BloodHound Cypher Queries Ported to a Jupyter Notebook☆53Jun 20, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.☆257Jul 29, 2021Updated 5 years ago
- A collection of searches, interesting events and tables on Crowdstrike Splunk.☆30Mar 2, 2021Updated 5 years ago
- IOCPARSER.COM is a Fast and Reliable service that enables you to extract IOCs and intelligence from different data sources.☆36Jan 20, 2022Updated 4 years ago
- Active Directory Purple Team Playbook☆120May 8, 2023Updated 3 years ago
- Ansible role to install Cobalt Strike and optionally configure as Teamserver☆33Mar 17, 2021Updated 5 years ago
- A Splunk app that will rotate between dashboards on a frequency; useful for displaying content on informational big screens.☆13Mar 9, 2022Updated 4 years ago
- A module for CME that spiders across a domain.☆35Jul 15, 2022Updated 4 years ago
- Collection of tools that reflect the network dimension into Bloodhound's data☆451Oct 19, 2022Updated 4 years ago
- ☆163Feb 13, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- POC for .NET mssql client for accessing database data through beacon☆64Sep 12, 2023Updated 3 years ago
- Compilation of resources to help with Adversary Simulation automation harness☆99Aug 7, 2020Updated 6 years ago
- Red Team Operator: Malware Development Essentials Course☆101Jun 18, 2020Updated 6 years ago
- ☆18Sep 14, 2023Updated 3 years ago
- macOS Artifact Intelligence Tool☆13Apr 30, 2019Updated 7 years ago
- ☆29Feb 14, 2018Updated 8 years ago
- Defence Against the Dark Arts☆35Sep 15, 2019Updated 7 years ago
- ☆20Feb 22, 2021Updated 5 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 7 months ago
- Identify the attack paths in BloodHound breaking your AD tiering☆326Nov 6, 2022Updated 3 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆116May 18, 2020Updated 6 years ago
- ACT documentation repo☆16May 22, 2024Updated 2 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Feb 27, 2020Updated 6 years ago
- Toolset for research malware and Cobalt Strike beacons☆210Mar 11, 2025Updated last year
- A pair of scripts to import session and local group information that has been collected from alternate data sources into BloodHound's Neo…☆21Aug 29, 2022Updated 4 years ago
- ☆56May 13, 2020Updated 6 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Creating a Feed of MISP Events from ThreatFox (by abuse.ch)☆18Jun 2, 2021Updated 5 years ago
- Sysmon EDR POC Build within Powershell to prove ability.☆229May 1, 2021Updated 5 years ago
- Mindmap/CheatSheet for eLearnSecurity-PTPv5☆10Jun 18, 2020Updated 6 years ago
- A collection of scripts for dealing with Cobalt Strike beacons in Python☆168Jan 5, 2021Updated 5 years ago
- Amplify network visibility from multiple POV of other hosts☆310Apr 12, 2024Updated 2 years ago
- Bloodhound Attack Path Automation in CobaltStrike☆324Apr 26, 2020Updated 6 years ago
- Iterative AD discovery toolkit for offensive operations☆84Mar 16, 2020Updated 6 years ago