Erik Huemer's repositories
ansible-velociraptor
Ansible role for Velociraptor EDR
Aurora-Incident-Response
Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders
C2IntelFeeds
Automatically created C2 Feeds
certspotter
Certificate Transparency Log Monitor
CursedChrome
Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.
DetectionLab_Test
Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices
ipld-eml
An RFC-5322 compatible email parser that stores data on IPFS
PeaceMaker
PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
safe-mail
safe-mail is a Docker service to help security teams safely interact with msg, eml, and documents
Cobalt-Strike
Cobalt Strike
CobaltStrike
CobaltStrike's source code
soc-faker
A python package for use in generating fake data for SOC and security automation.
sof-elk
Configuration files for the SOF-ELK VM, used in SANS FOR572
velociraptor
Digging Deeper....