Alternatives and similar repositories for MS-Graph-BlueTeam

Users that are interested in MS-Graph-BlueTeam are comparing it to the libraries listed below

• cyb3rmik3 / Hunting-Lists
  A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.
  ☆34Updated last year
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆83Updated last year
• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆80Updated 7 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆69Updated last year
• krdmnbrk / atomicgen.io
  A simple tool designed to create Atomic Red Team tests with ease.
  ☆48Updated 8 months ago
• Atomics-on-A-Friday / Emulation-Tools
  ☆31Updated 2 years ago
• alwashali / detection-validation
  Detection rule validation
  ☆40Updated 2 years ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆53Updated 2 years ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated 2 years ago
• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆65Updated 6 months ago
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆43Updated 10 months ago
• chipmanfu / Cyber-Range
  create a "simulated internet" cyber range environment
  ☆19Updated 6 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆37Updated last year
• elementalsouls / DumpLSASS
  ☆33Updated last year
• skandler / simulate-akira
  Simulation of Akira Ransomware with Invoke-AtomicTest
  ☆18Updated last year
• 0xB455 / m365-fatigue
  ☆79Updated last year
• haxxm0nkey / azhunt
  Azure AD (Entra ID) enumeration tool. Find related domains and tenant information in a simple way.
  ☆35Updated last year
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆26Updated 2 years ago
• tsale / EDR-Telemetry-Website
  ☆74Updated last week
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆54Updated 11 months ago
• MHaggis / AppLockerGen
  AppLocker Policy Generator
  ☆25Updated 3 months ago
• Antonlovesdnb / ConstructingDefenseLab
  Ludus range for the Constructing Defense Lab
  ☆67Updated 3 weeks ago
• Neo23x0 / Talks
  Slides of my public talks
  ☆56Updated last year
• ANSSI-FR / orc2timeline
  orc2timeline extracts and analyzes artifacts contained in archives generated with DFIR-ORC.exe to create a timeline from them
  ☆34Updated 5 months ago
• MazX0p / CobaltSentry
  ☆24Updated 9 months ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆41Updated 10 months ago
• NotSoSecure / NoPrompt
  ☆93Updated 4 months ago
• MorDavid / DCSyncHound
  This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)
  ☆65Updated 8 months ago
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆125Updated last year
• Bert-JanP / Domain-Response
  Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…
  ☆49Updated 3 months ago