Supporting materials for my "Intelligence-Led Adversarial Threat Modelling with VECTR" workshop
☆78Jan 19, 2026Updated 6 months ago
Alternatives and similar repositories for adversarial-threat-modelling
Users that are interested in adversarial-threat-modelling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆19Aug 25, 2022Updated 3 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 4 years ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago
- Notebooks created to attack and secure Active Directory environments☆26Nov 18, 2019Updated 6 years ago
- ☆66Jun 5, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆14Mar 9, 2023Updated 3 years ago
- Extract the Procedures (TTP) from CTI reports☆18Dec 13, 2025Updated 7 months ago
- Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.☆676Jun 14, 2023Updated 3 years ago
- Cuckoo Sandbox is an automated dynamic malware analysis system☆107May 22, 2020Updated 6 years ago
- Bypass Constrained Language Mode in PowerShell☆29May 21, 2019Updated 7 years ago
- Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...☆28Apr 13, 2023Updated 3 years ago
- This is a python tool aiming to make using TheHive webhooks easier.☆28Oct 23, 2020Updated 5 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆125May 24, 2022Updated 4 years ago
- JavaScript for Automation (JXA) macOS agent☆105Jul 30, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework☆357Nov 3, 2020Updated 5 years ago
- These are some of the commands which I use frequently during Malware Analysis and DFIR.☆24Jan 8, 2024Updated 2 years ago
- Takes the original idea of NetCease and adds functionality☆24Feb 6, 2022Updated 4 years ago
- Build your own threat hunting maturity model☆11Oct 29, 2017Updated 8 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆84May 23, 2022Updated 4 years ago
- ☆19May 1, 2025Updated last year
- Detection Ideas & Rules repository.☆179Sep 10, 2021Updated 4 years ago
- Purple Team Exercise Framework☆812Apr 9, 2026Updated 4 months ago
- Load any Beacon Object File using Powershell!☆262Dec 9, 2021Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆34Jun 22, 2021Updated 5 years ago
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 2 years ago
- VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities a…☆1,605Updated this week
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- A very simple lab to demo some Terraform, DSC, Inspec and Gitlab CI☆93Dec 8, 2022Updated 3 years ago
- Example of using Sleep to create better named pipes.☆41Jul 25, 2023Updated 3 years ago
- TAXII 2.0 Server implemented in Node JS with MongoDB backend☆12Jan 3, 2023Updated 3 years ago
- ForgeArmory provides TTPs that can be used with the TTPForge (https://github.com/facebookincubator/ttpforge).☆125Apr 14, 2026Updated 3 months ago
- This repository bundles various utilities and scripts I built for use with IBM QRadar SIEM☆16Jan 30, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 4 years ago
- Active Directory Purple Team Playbook☆117May 8, 2023Updated 3 years ago
- Read the contents of MS Word Documents using Cobalt Strike's Execute-Assembly☆118Sep 30, 2024Updated last year
- Rust cross-compiler☆15Aug 1, 2026Updated last week
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- Python Script to access ATT&CK content available in STIX via a public TAXII server☆571Dec 19, 2025Updated 7 months ago
- Threat Box Assessment Tool☆20Mar 5, 2026Updated 5 months ago