MHaggis

sysmon-dfir

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

CBR-Queries

Collection of useful, up to date, Carbon Black Response Queries

notes

Full of public notes and Utilities

ShellSweep

ShellSweeping the evil.

ASRGEN

ASR Configurator, Essentials and Atomic Testing

sigZap

SigZap is a Streamlit application designed to facilitate the search across multiple network signature sets at once.

AppLockerGen

AppLocker Policy Generator

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

amsi-tracer

Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution.

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

LLM

LLM tools and toys

MHaggis

tomcat-jmxproxy-rce-exp

Apache Tomcat JMXProxy RCE

AtomicLua

A combination of OffensiveLua and Learning Lua - By Defenders, for Defenders

AtomicTestHarnesses

Public Repo for Atomic Test Harness

attack_range_local

Build a attack range in your local machine

BlackLotus

BlackLotus UEFI Windows Bootkit

CVE-2024-4040

Scanner for CVE-2024-4040

DrvLoader

A post exploitation utility for loading signed kernel drivers using both the undocumented NtLoadDriver function and by directly interfacing with the Windows Service Control Manager (SCM)

gdrv-loader

Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

grab_beacon_config

HackerArt

A collection of art inspired by the world of cybersecurity and hacking culture.

HVCI-loldrivers-check

InstallerFileTakeOver

Invoke-PrintDemon

mockbin

Mock, Test & Track HTTP Requests and Response for Microservices

sigma

Generic Signature Format for SIEM Systems

signature-base

YARA signature and IOC database for my scanners and tools

SnakeMalware

Scripts and References for Snake Malware