Alternatives and similar repositories for MS-Graph-BlueTeam:

Users that are interested in MS-Graph-BlueTeam are comparing it to the libraries listed below

• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆71Updated 2 months ago
• mrobertsonris / EmailThreatHunting
  Advanced Email Threat Hunting w/ Detection as Code
  ☆52Updated last month
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆81Updated 10 months ago
• cyb3rmik3 / Hunting-Lists
  A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.
  ☆34Updated 8 months ago
• nyxgeek / track_the_planet
  DEFCON 31 slide deck and video link
  ☆58Updated 8 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆33Updated 9 months ago
• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆51Updated last year
• pr0xylife / Pikabot
  ☆32Updated 11 months ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆51Updated 3 months ago
• DebugPrivilege / OpenProject
  A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …
  ☆28Updated 4 months ago
• Atomics-on-A-Friday / Emulation-Tools
  ☆32Updated 2 years ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆71Updated 6 months ago
• MHaggis / ASRGEN
  ASR Configurator, Essentials and Atomic Testing
  ☆37Updated 4 months ago
• alwashali / detection-validation
  Detection rule validation
  ☆41Updated last year
• BloodHoundAD / TierZeroTable
  Table of AD and Azure assets and whether they belong to Tier Zero
  ☆26Updated last year
• joeavanzato / RetrievIR
  PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
  ☆100Updated 6 months ago
• krdmnbrk / atomicgen.io
  A simple tool designed to create Atomic Red Team tests with ease.
  ☆38Updated last week
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆25Updated 10 months ago
• tsale / EDR-Telemetry-Website
  ☆74Updated last week
• skandler / simulate-akira
  Simulation of Akira Ransomware with Invoke-AtomicTest
  ☆14Updated 8 months ago
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆43Updated last year
• CyberSecurityUP / EDR-Assessment
  This repository contains a comprehensive testing designed for evaluating the performance and resilience of Endpoint Detection and Respons…
  ☆51Updated 5 months ago
• CTI-Driven / Microsoft-ASR-to-MITRE-ATTACK-Mapping-Project
  This project aims to bridge the gap between Microsoft Attack Surface Reduction (ASR) rules and MITRE ATT&CK by mapping ASR rules to their…
  ☆24Updated 4 months ago
• sans-blue-team / DNS-Exfiltrate
  ☆24Updated 2 years ago
• infosecn1nja / Invoke-AtomicAssessment
  Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.
  ☆36Updated 2 months ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆33Updated 2 months ago
• LuemmelSec / PMP-Decrypter
  ☆40Updated last year
• Bert-JanP / Domain-Response
  Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to autom…
  ☆47Updated 11 months ago