Binary Defense

Binary Defense's repositories

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Language:Python1007 85 63

log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

Language:Python148 6 3

GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.

Language:PythonNOASSERTION138 15 3

YaraMemoryScanner

Simple PowerShell script to enable process scanning with Yara.

Language:PowerShellGPL-3.090 60

beacon-fronting

A simple command line program to help defender test their detections for network beacon patterns and domain fronting

Language:GoMIT65 60

ThreatHuntingJupyterNotebooks

Language:Jupyter Notebook58 10 1

BinaryDefense.FSharp.Analyzers

Security analyzers for the FSharp (F#) language

Language:F#MIT37 10 2

IcedDecrypt

IcedID Decryption Tool

Language:Python27 5 1

GhidraRustDependenciesExtractor

Ghidra script for extracting embedded Rust crate dependency strings from a compiled Rust binary

Language:Python26 50

JsonWrapper

A Myriad plugin for generating statically typed lossless wrappers around JToken given a schema.

Language:F#MIT15 9 2

ARC-Labs-ML-Starter-Kit

Language:Jupyter Notebook500

sysmon-modular

A repository of sysmon configuration modules

Language:PowerShellMIT5 20

community-threats

A place to share attack chains for testing people, process, and technology with the entire community. The largest, public library of adversary emulation and adversary simulation plans! #ThreatThursday

Language:PowerShellMIT4 20