A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.
☆112Jul 26, 2024Updated 2 years ago
Alternatives and similar repositories for Blue-Team-Tools
Users that are interested in Blue-Team-Tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A windows hardening script that makes it difficult to compromise a Windows device. Only for use during Blue-Team Competitions.☆32Jul 26, 2024Updated 2 years ago
- Repo of RIT CCDC Team Scripts☆13Mar 28, 2022Updated 4 years ago
- Collection Of Scripts And Utilities For Windows Event Hunting☆19Feb 20, 2020Updated 6 years ago
- Ansible Playbooks for SimeonOnSecurity's STIG Scripts☆16Jul 26, 2024Updated 2 years ago
- Please understand any use of these directly in competition can get you disqualified. These are simply examples for the sake of open sourc…☆29Jan 8, 2017Updated 9 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Some portable tools, some YARA, some Python, and a little bit of love. Not all of these tools can be used in incident response. Use PEs…☆40Apr 27, 2025Updated last year
- Tools, techniques, cheat sheets, and other resources to assist those defending organizations and detecting adversaries☆466Feb 4, 2022Updated 4 years ago
- Tools and Techniques for Digital Forensics and Incident Response☆11Oct 2, 2026Updated last month
- This repository contains a graphical representation (Mind maps) of specific topics, so one can utilize it as a handbook for that specific…☆15Feb 10, 2022Updated 4 years ago
- Automate Windows Defender STIG to 100% Compliance☆19Jul 26, 2024Updated 2 years ago
- Scripts that are suited for blue teams☆33Mar 17, 2016Updated 10 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- #ThreatHunting #DFIR #Malware #Detection Mind Maps☆305Nov 13, 2021Updated 4 years ago
- Merge files in one is a Notepad++ plugin☆12Nov 5, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA …☆196Jul 26, 2024Updated 2 years ago
- A PowerShell Module to create a Client and Server Named Pipe Server on Windows Systems☆11Aug 31, 2018Updated 8 years ago
- ☆19Aug 2, 2025Updated last year
- A PowerShell Logging Module that uses Classes to log to the console, log file, or the event viewer☆13Sep 13, 2018Updated 8 years ago
- Set up scripts for various OS'es☆25Jul 26, 2024Updated 2 years ago
- ☆11Nov 2, 2023Updated 3 years ago
- ThreatHunt is a PowerShell repository that allows you to train your threat hunting skills.☆134Jul 25, 2019Updated 7 years ago
- ☆12Sep 23, 2023Updated 3 years ago
- This contains a list of Blue Team Tools that I use daily, and have stored here for reference.☆34Nov 7, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Consolidates common system health checks, maintenance tasks & inventory retrieval☆18Nov 16, 2025Updated 11 months ago
- Cypher for Defenders: Leveraging Bloodhound Data Beyond the UI☆26Feb 8, 2024Updated 2 years ago
- Only for educational purposes☆11Jun 17, 2023Updated 3 years ago
- This is the ringzer0 writeup of web exploitation catagery. The name is "Word mean something"☆14Dec 8, 2023Updated 2 years ago
- ☆11Nov 13, 2024Updated last year
- Automating VMware Horizon Connection Servers☆11Feb 7, 2023Updated 3 years ago
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- 🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.☆5,626Jul 15, 2024Updated 2 years ago
- Powershell Event Tracing Toolbox☆77Mar 21, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. …☆1,392Apr 25, 2025Updated last year
- Flask app for File, PCAP, IOC analysis☆10Apr 3, 2023Updated 3 years ago
- This repo contains information on how to auto deploy Sysmon via GPO and Task Scheduler☆13Sep 7, 2021Updated 5 years ago
- Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.☆36Oct 18, 2024Updated 2 years ago
- This script is something that can be scheduled to be run every morning to understand what the environment looks like. Also takes correct…☆10Nov 9, 2020Updated 5 years ago
- ☆23Oct 20, 2026Updated last week
- Cobalt Strike is threat emulation software. Red teams and penetration testers use Cobalt Strike to demonstrate the risk of a breach and e…☆16Oct 13, 2022Updated 4 years ago