Guannan21's starred repositories
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
CB-Threat-Hunting
CarbonBlack EDR detection rules and response actions
PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
awesome-splunk-phantom
A collection of awesome resources built for and around the Splunk Phantom platform.
awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
ThreatHunting
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
splunk-spl
SPL cheatsheet for Splunk.
PowerShellArsenal
A PowerShell Module Dedicated to Reverse Engineering
PurpleSharp
PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments
DFIR-Resources
Some important DFIR Resources
DetectionLab
Automate the creation of a lab environment complete with security tooling and logging best practices
attack_range_local
Build a attack range in your local machine
attack_range
A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
awesome-osint
:scream: A curated list of amazingly awesome OSINT
osquery-attck
Mapping the MITRE ATT&CK Matrix with Osquery
osquery-defense-kit
Production-ready detection & response queries for osquery
PENTESTING-BIBLE
articles