thetanz / csfalcon

Related projects: ⓘ

• thremulation-station / thremulation-station
  Small-scale threat emulation and detection range built on Elastic and Atomic Redteam.
  ☆34Updated 9 months ago
• dfirence / ma-insights-xe
  User Feedback Space of #MitreAssistant
  ☆37Updated last year
• CrowdStrike / xwf-yara-scanner
  ☆84Updated 7 months ago
• Dead-Simple-Scripts / AutoLLR
  Script to automate Linux live evidence collection
  ☆27Updated 2 years ago
• MHaggis / notes
  Full of public notes and Utilities
  ☆81Updated 3 weeks ago
• svch0stz / TheThreatHuntLibrary
  Library of threat hunts to get any user started!
  ☆40Updated 4 years ago
• keydet89 / Events-Ripper
  Project based on RegRipper, to extract add'l value/pivot points from TLN events file
  ☆74Updated 3 weeks ago
• west-wind / Threat-Hunting-With-Splunk
  Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
  ☆55Updated 4 months ago
• Silv3rHorn / BulkStrike
  BulkStrike enables the usage of CrowdStrike Real Time Response (RTR) to bulk execute commands on multiple machines.
  ☆41Updated last year
• AtomicGaryBusey / AzureForensics
  ☆29Updated 2 years ago
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆45Updated 10 months ago
• paladin316 / ThreatHunting
  This repo is where I store my Threat Hunting ideas/content
  ☆85Updated last year
• mgreen27 / DetectRaptor
  A repository to share publicly available Velociraptor detection content
  ☆115Updated this week
• TazWake / Public
  Collection of scripts provided for public use
  ☆28Updated last month
• Ruler-Project / ruler-project
  Remote access and Antivirus Logging Database
  ☆39Updated 4 months ago
• biffalo / easy-wins-endpoint-defense
  Collection of scripts/resources/ideas for attack surface reduction and additional logging to enable better threat hunting on Windows endp…
  ☆38Updated 5 months ago
• socprime / the-prime-hunt
  A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation
  ☆75Updated 3 months ago
• invictus-ir / Blue-team-app-Office-365-and-Azure
  ☆68Updated last year
• swisscom / Invoke-Forensics
  Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.
  ☆108Updated 9 months ago
• The-DFIR-Report / cyberchef-recipes
  ☆18Updated 2 years ago
• SentineLabs / S1QL-Queries
  ☆50Updated last year
• target / Threat-Hunting
  Detection of obfuscated Powershell commands
  ☆53Updated last year
• svch0stz / velociraptor-detections
  ☆19Updated last year
• ReconInfoSec / velociraptor-to-timesketch
  ☆84Updated 3 months ago
• csababarta / memory-baseliner
  Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…
  ☆47Updated last year
• hackjalstead / IRCP
  A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments
  ☆64Updated 2 years ago
• correlatedsecurity / SPEED-SIEM-Use-Case-Framework
  Repository for SPEED SIEM Use Case Framework
  ☆52Updated 4 years ago
• PolarBearGod / CrowdStrike-RTR-Scripts
  ☆26Updated 3 years ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆70Updated last week
• center-for-threat-informed-defense / attack-powered-suit
  ATT&CK Powered Suit is a browser extension that puts the complete MITRE ATT&CK® knowledge base at your fingertips with text search, conte…
  ☆69Updated last week