hxnoyd

Ricardo Dias's starred repositories

docker-zeek-elk

CS 312 Final Project: Docker Compose Zeek + ELK

Language:DockerfileMIT700

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

Language:PythonApache-2.02000

cti

Cyber Threat Intelligence Repository expressed in STIX 2.0

NOASSERTION174300

Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The results are presented in a Web layer to help defenders identify outliers and suspicious behavior on corporate environments.

Language:PythonBSD-3-Clause17700

deobfuscator

The real deal

Language:JavaApache-2.0159000

tau-tools

A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit

Language:PowerShellMIT23000

Shuffle

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

Language:ShellAGPL-3.0174000

authlib

The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS,JWE,JWK,JWA,JWT included.

Language:PythonBSD-3-Clause456400

detection-hackathon-apt29

Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets

Language:Jupyter NotebookGPL-3.013200

KQL

KQL queries for Advanced Hunting

MIT16600

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

139200

ctf-scoreboard

This scoreboard allows you to host your own cybersecurity capture-the-flag (jeopardy-style or attack/defend) competition. Also includes team creation!

Language:RubyApache-2.05400

SysmonCommunityGuide

TrustedSec Sysinternals Sysmon Community Guide

Language:CSS114100

chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

Language:CMIT29200

411

An Alert Management Web Application

Language:PHPMIT97100

at-ps

Adversary Tactics - PowerShell Training

Language:PowerShellNOASSERTION152100

elasticsearch-dump

Import and export tools for elasticsearch & opensearch

Language:JavaScriptApache-2.0754500

evtx2es

A library for fast parse & import of Windows Eventlogs into Elasticsearch.

Language:PythonMIT8100

tram

Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.

Language:JavaScriptApache-2.034600

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

Language:C139900

attack-website

MITRE ATT&CK Website

Language:HTMLApache-2.048900

ReverseTCPShell

PowerShell ReverseTCP Shell - Framework

Language:PowerShell104100

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Language:JavaMIT777000

cb-yara-connector

Analyze binaries collected in VMware Carbon Black EDR against Yara rules.

Language:Python3600

OffensiveCSharp

Collection of Offensive C# Tooling

Language:C#BSD-3-Clause137900

vscode-nested-tags

Stop using your file tree to organize your notes. Transform VSCode into a note-taking app by adding tag support.

Language:TypeScriptMIT7500

reverse-engineering-and-malware-analysis

Course content and slides from my ancient training on Reverse Engineering & Malware Analysis

MIT14200

caldera

Automated Adversary Emulation Platform

Language:PythonApache-2.0564200

Phishing.Database

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

Language:ShellMIT113300