aboutsecurity

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

windows

Windows inside a Docker container.

MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

data

APTnotes data

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

Noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

metta

An information security preparedness tool to do adversarial simulation.

artifacts

Digital Forensics artifact repository

thug

Python low-interaction honeyclient

EmoCheck

Emotet detection tool for Windows OS

peframe

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

PurpleCloud

A little tool to play with Azure Identity - Azure Active Directory lab creation tool

BeaconHunter

Detect and respond to Cobalt Strike beacons using ETW.

Clearcut

Clearcut is a tool that uses machine learning to help you focus on the log entries that really need manual review

awesome

A curated list of awesome things related to TheHive & Cortex

voyeur

VOYEUR's main purpose is to generate a fast (and pretty) Active Directory report. The tool is developed entirely in PowerShell (a powerful scripting language) without dependencies (just .Net Framework 3.5 and Ofiice Excel if you want an useful and pretty report). The generated report is a perfect starting point for well-established forensic, incident response team, or security researchers who want to quickly analyze threats in Active Directory Services.

bro-scripts

Bro scripts to be shared with the community

mwcrawler

Python Malware Crawler for Zoos and Repositories

ezEmu

See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)

SANS-CTI-Summit-2021

Resources for SANS CTI Summit 2021 presentation

threat-research-and-intelligence

BlackBerry Threat Research & Intelligence

emotet_network_protocol

DionaeaFR

Dionaea Front Web

pentest-scripts

AuditcastsScripts

Handy scripts developed and discussed on http://auditcasts.com

cif-configs

welp

bro-plugins

A repo for Bro plugins.

BAYA

Automated Extraction & Analysis of Valuable Security Data Elements