A collection of content for blue team professionals, designed to support both reactive and proactive cybersecurity measures of every aspect.
☆34Apr 2, 2026Updated 3 months ago
Alternatives and similar repositories for Blue
Users that are interested in Blue are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ETW forensic tool for Volatility3 plugin☆16Nov 15, 2024Updated last year
- ☆12Jul 15, 2022Updated 3 years ago
- Yara rules for malicious javascript files from public repositories or written by me.☆13Nov 12, 2021Updated 4 years ago
- A script designed to test passwords against user accounts within an Active Directory environment, offering customizable Account Lockout T…☆17Jan 28, 2026Updated 5 months ago
- Generate Volatility3 profiles from BTF.☆34Dec 21, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Repo to hold my PowerShell Scripts☆17Oct 19, 2022Updated 3 years ago
- With zero dependencies, NetCredz extracts credentials from pcap files or live traffic, supporting NTLM, LDAP, HTTP, SMTP, SNMP, Telnet, F…☆80Dec 2, 2024Updated last year
- SATO is a PowerShell tool focuses on providing flexible, multi-grant type support for obtaining, managing, and analyzing Azure tokens.☆24Jun 6, 2026Updated last month
- testing123☆14Nov 23, 2024Updated last year
- Research into Undocumented Behavior of Azure AD Refresh Tokens☆13Oct 27, 2023Updated 2 years ago
- Secrets Find0r is a multithreaded SMB share crawler that hunts for exposed credentials and secrets across Windows networks. It enumerates…☆70May 6, 2026Updated 2 months ago
- Regex based secret scanner for sccm deployment points sccmcontentlib$ shares. Find secrets automatically and download entire packages for…☆18Aug 13, 2025Updated 10 months ago
- string/file/shellcode encryptor using AES/XOR☆11Oct 15, 2023Updated 2 years ago
- Token impersonation in PowerShell to execute under the context of another user.☆25Oct 14, 2025Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- bring your own clean ntdll (or other MS dlls)☆29Jul 14, 2025Updated 11 months ago
- TOCFL word-list CSV file generator☆17Nov 21, 2024Updated last year
- A framework and taxonomy for identifying, classifying, and reasoning about detection logic bugs in SIEM, EDR, and XDR rules, with concret…☆57Mar 5, 2026Updated 4 months ago
- ☆16Sep 5, 2024Updated last year
- Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC☆72Updated this week
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Azure AppHunter is an open-source tool created for security researchers, red teamers and defenders to help them identify excessive privil…☆104May 31, 2026Updated last month
- ☆10Jul 1, 2023Updated 3 years ago
- An open framework for computer-enabled insider threat investigations.☆34Jun 25, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Dump Linux keyrings☆24Jul 15, 2024Updated last year
- A simple apple crash report parser for rust☆26Jun 24, 2026Updated 2 weeks ago
- A tool to keep AWS pentests and red teams efficient, organized, and stealthy.☆96Dec 29, 2025Updated 6 months ago
- ☆13Dec 10, 2020Updated 5 years ago
- A tiny tool built to help AD Admins tame the Protected Users group.☆142Mar 22, 2026Updated 3 months ago
- ☆34Jun 13, 2023Updated 3 years ago
- RDLL for Cobalt Strike beacon to silence sysmon process☆92Sep 9, 2022Updated 3 years ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆83Apr 11, 2026Updated 2 months ago
- This code snippet retrieves Azure Sentinel rules that are mapped to MITRE ATT&CK Framework and generates the related MITRE D3FEND defense…☆75Jun 28, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Heap encryption in Nim☆21Aug 25, 2024Updated last year
- A summary of NSO Group/Circles documents, research and media clippings.☆12Apr 13, 2024Updated 2 years ago
- An open-source, cross-platform application for Acorn ADFS and DFS disc image manipulation☆14Apr 10, 2018Updated 8 years ago
- EnumDNS is a modular DNS reconnaissance tool capable of resolving hosts from various sources, including wordlists, BloodHound files, and …☆21Jun 29, 2026Updated last week
- ☆12Jun 3, 2022Updated 4 years ago
- ☆12Oct 21, 2021Updated 4 years ago
- Writing Nimless Nim - Slides and source for BSIDESKC 2024 talk.☆86Jul 11, 2025Updated 11 months ago