sketchymoose / workslikeaJARMLinks
Method of finding interesting domains using keywords + JARMs
☆13Updated 2 years ago
Alternatives and similar repositories for workslikeaJARM
Users that are interested in workslikeaJARM are comparing it to the libraries listed below
Sorting:
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆27Updated 2 years ago
- Command and Control Framework using powershell implants☆35Updated last month
- ☆18Updated last year
- CIS Benchmark testing of Windows SIEM configuration☆44Updated 2 years ago
- A project created with an aim to emulate and test exfiltration of data over different network protocols.☆31Updated 2 years ago
- Searching .evtx logs for remote connections☆24Updated 2 years ago
- ☆42Updated 4 months ago
- self-hosted Azure OSINT tool☆31Updated last month
- ☆19Updated last year
- Proof-of-Concept to evade auditd by writing /proc/PID/mem☆22Updated last year
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆23Updated this week
- Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core"☆15Updated last year
- Script to chain search parameters for MalwareBazaar☆12Updated 6 months ago
- ☆16Updated 6 months ago
- ☆54Updated 7 months ago
- Continuous kerberoast monitor☆45Updated last year
- Bash tool used for proactive detection of malicious activity on macOS systems.☆35Updated 2 years ago
- ☆22Updated 2 years ago
- Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…☆21Updated 3 months ago
- Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups☆60Updated 2 years ago
- Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...☆30Updated 2 years ago
- Providing Azure pipelines to create an infrastructure and run Atomic tests.☆52Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆31Updated 3 years ago
- ☆24Updated 3 years ago
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Updated 2 years ago
- A mini project to exfiltrate data via QR codes☆19Updated 2 months ago
- Triaging Windows event logs based on SANS Poster☆39Updated 2 years ago
- CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"☆49Updated 3 years ago
- A simple command line program to help defender test their detections for network beacon patterns and domain fronting☆69Updated 3 years ago
- Detecting Cobalt Strike Team Servers on targets through traffic telemetry.☆22Updated 11 months ago