jpressnell

pi-hole

A black hole for Internet advertisements

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

attack-eval-scoring

autopager

Detect and classify pagination links

aws-labs

A collection of hands-on labs to help learning the fundamentals of AWS cloud computing services.

AzGOAT

Vulnerable Azure Environment (WIP)

BoomBox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

cascade-server

CASCADE Server

cloud-roles-database

Cloud Roles Database

Cookbook

The Data Engineering Cookbook

detectionlab

fleet

A flexible control server for osquery fleets

grr

GRR Rapid Response: remote live forensics for incident response

Kansa

A Powershell incident response framework

mhn

Modern Honey Network

MicroBurst

A collection of scripts for assessing Microsoft Azure security

misp-osint-collection

Collection of best practices to add OSINT into MISP and/or MISP communities

OnionIngestor

An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch

osinttools

A collection of random OSINT scripts

packages

The default package source of the Zeek Package Manager

playbooks

Phantom Orchestration Playbooks

PurpleCloud

An Infrastructure as Code (IaC) deployment of a small Active Directory pentest lab in the cloud. The deployment simulates a semi-realistic corporate enterprise Active Directory with a DC and endpoints. Purple team goals include blue team detection capabilities and R&D for detection engineering new approaches.

sherlock

🔎 Hunt down social media accounts by username across social networks

sigma

Generic Signature Format for SIEM Systems

sysmon-config

Sysmon configuration file template with default high-quality event tracing

tracee

Linux Runtime Security and Forensics using eBPF

TuxResponse

Linux Incident Response

ultimate-python

Ultimate Python study guide for newcomers and professionals alike. :snake: :snake: :snake:

untappdScraper

Script to scrape untappd.com content

zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.