23r0k001

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike

CDAS

This program generates cyber attack scenarios for use in cyber training exercises, red team planning, blue team planning, automated attack execution, and cybersecurity policy analysis.

OpenDXL-ATD-MISP

Automated threat intelligence collection with McAfee ATD, OpenDXL and MISP

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

Grafiki

Threat Hunting tool about Sysmon and graphs

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Research

Research indicators and detection rules

pypykatz

Mimikatz implementation in pure Python

TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

TheHiveDocs

Documentation of TheHive

Find-LOLBAS

Simple powershell script to find living off land binaries and scripts on a system.

MalwarePersistenceScripts

A collection of scripts I've written to help red and blue teams with malware persistence techniques.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

cisco-network-chef-cookbook

RTS-Queries

Practical Orientation Of MVISION EDR Query Language

Skadi

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

cutter

Free and Open Source Reverse Engineering Platform powered by rizin

SQLite-Deleted-Records-Parser

Script to recover deleted entries in an SQLite database

Chrome-Parse

Parse Chrome History and Downloads into TSV or TLN format

redcanary-response-utils

Tools to automate and/or expedite response.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

TALR

Threat Alert Logic Repository

yarGen

yarGen is a generator for YARA rules

iocs

Indicators from Unit 42 Public Reports