dsvetlov

webshell

This is a webshell open source project

atc-react

A knowledge base of actionable Incident Response techniques

UpdateWdsFromWsus

PowerShell Script which Updates Images in Windows Deployment Services using w Windows Server Update Services Repository

hsm-guide

HSM documentation

2019BSidesLV

2019 BSidesLV Workshop: Finding Evil with MITRE ATT&CK and the Elastic Stack

Publications

voicy

@voicybot Telegram bot main repository

OSSEM

Open Source Security Events Metadata (OSSEM)

opencti

Open Cyber Threat Intelligence Platform

zbrunk

Universal data analysis system

authelia

The Single Sign-On Multi-Factor portal for web apps

mhn

Modern Honey Network

GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

wazuh-ruleset

Wazuh - Ruleset

wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Awesome-SDLC

Collection of resources on building Secure Development Lifecycle

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

ATTACKdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

Grouper2

Find vulnerabilities in AD Group Policy

Litmus_Test

Detecting ATT&CK techniques & tactics for Linux

auditd-mitre

Enhanced MITRE auditd rules for linux

siddhi

Stream Processing and Complex Event Processing Engine

stip-common

Seamless Threat Intelligence Platform

audit-springbok

A tool for analyzing firewall rules

CDMCS

Cyber Defence Monitoring Course Suite :: Suricata, Arkime (and others in the past)

DeTTECT

Detect Tactics, Techniques & Combat Threats

Threat_Hunting_with_ELK

天御攻防实验室 - 威胁猎杀实战系列

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

sysmon-modular

A repository of sysmon configuration modules