ELsaman's repositories
sigma-rules
Sigma rules from Joe Security
AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
APT_CyberCriminal_Campagin_Collections
APT & CyberCriminal Campaign Collection
artifacts
Digital Forensics Artifact Repository
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
awesome-incident-response
A curated list of tools for incident response
bcc
BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
bddisasm
bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
conti-pentester-guide-leak
Leaked pentesting manuals given to Conti ransomware crooks
Elsaman
Digital Forensic & Incident Responce
EVTX-ATTACK-SAMPLES
Windows Events Attack Samples
FalconFriday
Bi-weekly hunting queries
ghidra
Ghidra is a software reverse engineering (SRE) framework
gsvsoc_cirt-playbook-battle-cards
Cyber Incident Response Team Playbook Battle Cards
Kansa
A Powershell incident response framework
KapeFiles
This repository serves as a place for community created Targets and Modules for use with KAPE.
MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
PeekabooAV
Peekaboo Extended Email Attachment Behavior Observation Owl
PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual.
Reverse-Engineering-Tutorial
A comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
sliver
Adversary Emulation Framework
StreamDivert
Redirecting (specific) TCP, UDP and ICMP traffic to another destination.
SysmonCommunityGuide
TrustedSec Sysinternals Sysmon Community Guide
ThreatPursuit-VM
Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.
Use_Case_Applicability
Security Monitoring Resolution Categories