Cyb3rtus

SOARCA

SOARCA - The Open Source CACAO-based Security Orchestrator!

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

log-viewer

Web UI for viewing logs

Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

misp-to-sentinel

Azure function to insert MISP data in to Azure Sentinel

decider

A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.

cset

Cybersecurity Evaluation Tool

Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

updog

Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.

sof-elk

Configuration files for the SOF-ELK VM

Havoc

The Havoc Framework.

APTSimulator

A toolset to make a system look as if it was the victim of an APT attack

Fenrir

Simple Bash IOC Scanner

awesome-incident-response

A curated list of tools for incident response

Flipper

Playground (and dump) of stuff I make or modify for the Flipper Zero

awesome-flipperzero

🐬 A collection of awesome resources for the Flipper Zero device.

Azure-Sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

SC-200T00A-Microsoft-Security-Operations-Analyst

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

aws-incident-response-playbooks

knock

Knock Subdomain Scan

amass

In-depth attack surface mapping and asset discovery

Sn1per

Attack Surface Management Platform

raspiBackup

Backup your Raspberry

EnterprisePurpleTeaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

WADComs.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

SME