Alternatives and similar repositories for Blue

Users that are interested in Blue are comparing it to the libraries listed below

• synacktiv / ntdissector
  ☆163Updated 6 months ago
• MazX0p / CobaltSentry
  ☆24Updated 10 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆91Updated last year
• techspence / AppLockerInspector
  Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks.
  ☆129Updated 4 months ago
• jfmaes / aws_mini_ad
  An Infrastructure as code proof of concept to deploy a bare minimum AD environment in AWS.
  ☆46Updated 3 months ago
• nasbench / Misc-Research
  A collection of tools, scripts and personal research
  ☆154Updated 2 weeks ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆69Updated last year
• LuemmelSec / APEX
  Azure Post Exploitation Framework
  ☆242Updated last month
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆107Updated 9 months ago
• CCob / Shwmae
  ☆161Updated 10 months ago
• amjcyber / pwnlook
  An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…
  ☆166Updated last year
• absolomb / FindMeAccess
  ☆176Updated last week
• dirkjanm / roadtools_hybrid
  Hybrid AD utilities for ROADtools
  ☆102Updated 7 months ago
• SadProcessor / BloodHoundOperator
  BloodHound PowerShell client
  ☆75Updated 2 weeks ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆168Updated 10 months ago
• Antonlovesdnb / ConstructingDefenseLab
  Ludus range for the Constructing Defense Lab
  ☆68Updated last month
• synacktiv / gpoParser
  gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…
  ☆308Updated 3 months ago
• mlcsec / Graphpython
  Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit
  ☆162Updated last year
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆84Updated last year
• badsectorlabs / sccm-http-looter
  Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
  ☆205Updated last year
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆66Updated 7 months ago
• Leo4j / Invoke-SMBRemoting
  Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
  ☆181Updated 7 months ago
• olafhartong / BamboozlEDR
  A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
  ☆251Updated 3 months ago
• The-Viper-One / Invoke-PowerDPAPI
  Decrypt SCCM and DPAPI secrets with Powershell.
  ☆43Updated 6 months ago
• trustedsec / The_Shelf
  Retired TrustedSec Capabilities
  ☆248Updated last year
• zh54321 / SnafflerParser
  Parses Snaffler output file and generate beautified outputs.
  ☆112Updated 11 months ago
• LuemmelSec / Custom-BloodHound-Queries
  ☆182Updated last year
• api0cradle / RedTeamScripts
  Just some random Red Team Scripts that can be useful
  ☆153Updated last year
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆127Updated last year
• MaorSabag / SafeCrypt
  ☆31Updated 2 months ago