0xSV1

SV1's starred repositories

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

Language:Python1964 29 5

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Language:DockerfileNOASSERTION1655 43 84

Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

Language:PythonBSD-3-Clause1175 61 5

Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.

CC0-1.0808 270

iLEAPP

iOS Logs, Events, And Plist Parser

Language:PythonMIT720 28 77

FalconFriday

Hunting queries and detections

BSD-3-Clause716 56 2

KQL-threat-hunting-queries

A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 Defender).

MIT550 12 1

PassTheCert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

Language:C#Apache-2.0541 8 15

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

Language:HTMLBSD-3-Clause516 70

Blacksmith

Building environments to replicate small networks and deploy applications

Language:PowerShellGPL-3.0316 16 20

AtlasReaper

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

Language:C#GPL-3.0242 20

AD-Canaries

The purpose of this project is to publish and maintain the deployment PowerShell script that automates deployments for Active Directory Canary objects.

Language:PowerShellMIT200 4 1