Userland API monitor for threat hunting
☆58Mar 4, 2020Updated 6 years ago
Alternatives and similar repositories for Captain
Users that are interested in Captain are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Live hunting of code injection techniques☆384Aug 22, 2019Updated 7 years ago
- Powershell collection designed to assist in Threat Hunting Windows systems.☆27Apr 13, 2018Updated 8 years ago
- An ELK environment containing interesting security datasets.☆137May 11, 2020Updated 6 years ago
- BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.☆77Dec 13, 2022Updated 3 years ago
- OSSEM Modular☆27Jun 29, 2020Updated 6 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Various commands, tools, techniques that you can use to examine live Windows systems for signs of Compromise or for Threat Hunting.Can al…☆15May 30, 2026Updated 5 months ago
- Go Lang Portable Executable Parser☆39Mar 31, 2021Updated 5 years ago
- Automated Script to capture forensic evidences (logs) from an Windows EndPoint.☆13Apr 26, 2021Updated 5 years ago
- Red Team C2 and Post Exploitation code☆36Sep 8, 2026Updated last month
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆64Jun 9, 2026Updated 4 months ago
- ☆12Feb 8, 2023Updated 3 years ago
- Resources for DFIR Professionals Responding to the Whispergate☆10Jan 17, 2022Updated 4 years ago
- Collection of scripts and tools related to the eCTHPv2 exam by INE.☆19Jun 12, 2022Updated 4 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Resolvn Threat Hunting Virtual Machine☆138Aug 16, 2019Updated 7 years ago
- ☆11Aug 10, 2021Updated 5 years ago
- ☆20Jan 28, 2020Updated 6 years ago
- Process Hollowing☆12Sep 13, 2017Updated 9 years ago
- Extendable payload obfuscation and delivery framework☆143Nov 4, 2022Updated 3 years ago
- A PowerShell script that checks for dangerous ACLs on system hives and shadows☆26Jul 21, 2021Updated 5 years ago
- SIEM USE Case Selection Methodology☆18Sep 18, 2020Updated 6 years ago
- From 32-bit process to 64-bit process☆69Apr 17, 2021Updated 5 years ago
- PowerShell script for hunting webshells on Microsoft Exchange Servers.☆56Feb 1, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Remove API hooks from a Beacon process.☆14Sep 18, 2021Updated 5 years ago
- Resources for I Want My EIP, presented at Derbycon 2017☆11Sep 23, 2017Updated 9 years ago
- Just a bunch of useful links to take (and pass!) OSCP☆19May 18, 2020Updated 6 years ago
- Research indicators and detection rules☆69Sep 20, 2023Updated 3 years ago
- Process Injection: CreateRemoteThread☆24Dec 17, 2020Updated 5 years ago
- MalwareAnalysis☆12Dec 19, 2020Updated 5 years ago
- SEC599 supporting GitHub repository☆16Sep 14, 2019Updated 7 years ago
- Malware samples observed in the wild from time to time☆12Jul 29, 2019Updated 7 years ago
- A Simple CLI App to mark all EXCEL sheets visible (i.e. sets "Very Hidden" and "Hidden" to "Visible")☆11Apr 16, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Cyber Threats Detection Rules☆14Sep 16, 2025Updated last year
- Reference sheet for Threat Hunting Professional Course☆26Mar 10, 2019Updated 7 years ago
- A python based semi-automatic buffer overflow exploit script☆16Sep 6, 2020Updated 6 years ago
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆288Mar 8, 2023Updated 3 years ago
- A Splunk Technology Add-on to forward filtered ETW events.☆31Oct 14, 2020Updated 6 years ago
- RDP Checker☆66Feb 23, 2024Updated 2 years ago
- OpenVPN Connect for Windows (MSI) - 3.1.0.361 - Privilege Escalation☆25Feb 28, 2020Updated 6 years ago