Alternatives and similar repositories for TA_tooling

Users that are interested in TA_tooling are comparing it to the libraries listed below

• Immersive-Labs-Sec / BruteRatel-DetectionTools
  A collection of Tools and Rules for decoding Brute Ratel C4 badgers
  ☆64Updated 3 years ago
• RiccardoAncarani / talks
  ☆42Updated 3 years ago
• RomaissaAdjailia / Get-AppLockerEventlog
  This is a repo for fetching Applocker event log by parsing the win-event log
  ☆31Updated 2 years ago
• blackarrowsec / Malleable-C2-Profiles
  Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…
  ☆17Updated 4 years ago
• pgormanDS / hash_spider
  A module for CME that spiders across a domain.
  ☆35Updated 3 years ago
• jonny-jhnson / LDAPMon
  ☆45Updated last year
• RedSiege / FunctionalC2
  A small POC of using Azure Functions to relay communications. Feel free to add additional functionality beyond this POC!
  ☆76Updated 2 years ago
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆69Updated 3 years ago
• Mr-B0b / BloodCheck
  BloodCheck enables Red and Blue Teams to manage multiple Neo4j databases and run Cypher queries against a BloodHound dataset.
  ☆17Updated 4 years ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• CompassSecurity / PowerLsassSilentProcessExit
  ☆26Updated 4 years ago
• fozavci / TradecraftDevelopment-Fundamentals
  Tradecraft Development Fundamentals
  ☆40Updated 3 years ago
• skelsec / pypykatz-volatility3
  pypykatz plugin for volatility3 framework
  ☆40Updated last month
• mlgualtieri / PurpleTeamSummit
  ☆27Updated 4 years ago
• ConstantinT / Lantern
  ☆23Updated 3 years ago
• Pascal-0x90 / sideloadr
  Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
  ☆57Updated 2 years ago
• knavesec / o365fedenum
  Federated Office365 user enumeration based on correlated response trend analysis
  ☆51Updated 3 years ago
• kyleavery / Multi-Stage-Mythic
  ☆25Updated 3 years ago
• 0xe7 / WonkaVision
  ☆84Updated 2 years ago
• DidierStevens / AdHoc
  AdHoc solutions
  ☆48Updated last year
• MalwareTech / FollinaExtractor
  Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files
  ☆31Updated 3 years ago
• FuzzySecurity / WWHF-WayWest-2022
  ☆37Updated 3 years ago
• netwrix / server-untrust-account
  A technique for Active Directory domain persistence
  ☆39Updated 2 years ago
• lkarlslund / hashmuncher
  Grab NetNTLMv2 hashes using ETW with administrative rights on Windows 8.1 / Windows Server 2016 and later
  ☆91Updated 2 years ago
• AssuranceMaladieSec / FoxTerrier
  Python tool to find vulnerable AD object and generating csv report
  ☆26Updated 3 years ago
• matthw / malware_analysis
  ☆18Updated last year
• VirtualAlllocEx / Taskschedule-Persistence-Download-Cradles
  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged
  ☆86Updated 3 years ago
• mitchmoser / AtYourService
  Service Enumeration C# .NET Assembly
  ☆58Updated 3 years ago
• Tylous / Slides
  ☆38Updated last year
• djackreuter / taskmgr_hooking
  Dump LSASS process in Task Manager without triggering Defender.
  ☆18Updated 2 years ago