F3dai

FLAIR

F-Secure Lightweight Acqusition for Incident Response (FLAIR)

Incident-Response-Playbooks

Malware-Exhibit

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

tau-research

The project will serve as a central repository for VMware Threat Analysis Unit (TAU) to share threat intelligence with the security community, such as threat indicators of compromises (IoCs) and the corresponding scripts/tools TAU developed to extract the IoCs. The IoCs are typically used/discussed in TAU's published research papers such as reports and blog posts.

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

conpot

ICS/SCADA honeypot

terraform-aws-elasticsearch

Terraform module to provision an Elasticsearch cluster with built-in integrations with Kibana and Logstash.

terraform-elastic-cloud

Terraform module automates Elastic Cloud deployment and optional data migration to the AWS Cloud.

docker-elk

The Elastic stack (ELK) powered by Docker and Compose.

ransomwatch

the transparent ransomware claim tracker 🥷🏼🧅🖥️

impacket

Impacket is a collection of Python classes for working with network protocols.

caldera-ot

MITRE Caldera™ for OT Plugins & Capabilities

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

CyberBattleSim

An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.

noVNC

VNC client web application

cybersecurity-architecture

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Software & Systems Architecture in Cybersecurity

velociraptor

Digging Deeper....

NTLMRawUnHide

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following binary network packet capture formats are supported: *.pcap *.pcapng *.cap *.etl

Pentest-Tools

elastic-container

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

piotr

Piotr - IoT firmware emulation instrumentation for training and research

IoT-Simulator-Emulator

IoT Simulator / Emulator is a realtime IoT network simulator and emulator based on MQTT protocol. Key features include: "Static" and "Vehicle" IoT sensors, XML config, SQLServer Database, Power BI visualization dashboard, Google / GPX mapping, Json Messages, MQTT communications

ESPKey

Wiegand data logger, replay device and micro door-controller

adversarial-robustness-toolbox

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

container-security-fundamentals

AMSI.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Ransomchats

IoTSecurity

IoT Security for Industries

DVID

Damn Vulnerable IoT Device