kerbalette's repositories

velociraptor-artifacts

Generic artifacts for multiple Operating Systems to extend the VQL hunts of Velociraptor

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Language:C++License:GPL-2.0Stargazers:0Issues:0Issues:0

ansible-digitalocean

DIgital Ocean Ansible playbooks

Language:JavaScriptStargazers:0Issues:0Issues:0
Language:ShaderLabStargazers:0Issues:0Issues:0
Language:C#Stargazers:0Issues:0Issues:0

dotnetvelociraptor

DOTNET Library for API Calls to Velociraptor

Language:C#Stargazers:0Issues:0Issues:0
Language:C#Stargazers:0Issues:0Issues:0

virusTotalCmdLine

Small utility to push binaries to VT for analysis

Language:C#Stargazers:0Issues:0Issues:0

vpsManager

.NET Core project for managing various VPS solutions such as DigitalOcean and Vultr. Can use this for quickly spinning up Virtual Instances for Incident Response investigations.

Language:C#Stargazers:0Issues:0Issues:0

core

:house_with_garden: Open source home automation that puts local control and privacy first.

License:Apache-2.0Stargazers:0Issues:0Issues:0

DidierStevensSuite

DidierStevensSuite python package

Language:PythonStargazers:0Issues:0Issues:0

Home-Assistant_Config

BeardedTinker Home Assistant configuration. Feel free to browse, edit, tweak, improve, criticize and suggest.

License:MITStargazers:0Issues:0Issues:0

homebridge

HomeKit support for the impatient

Language:JavaScriptLicense:Apache-2.0Stargazers:0Issues:0Issues:0

ircapabilities

Incident Response Hierarchy of Needs

Stargazers:0Issues:0Issues:0

koadic

Koadic C3 COM Command & Control - JScript RAT

Language:PythonLicense:Apache-2.0Stargazers:0Issues:0Issues:0

MemProcFS

The Memory Process File System

License:AGPL-3.0Stargazers:0Issues:0Issues:0

Process-Hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

Language:C++Stargazers:0Issues:0Issues:0
Stargazers:0Issues:0Issues:0

rita

Real Intelligence Threat Analytics

Language:GoLicense:GPL-3.0Stargazers:0Issues:0Issues:0

sam-bot

Bot to create MISP events from data in Slack

Stargazers:0Issues:0Issues:0

SysmonSimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

License:LGPL-2.1Stargazers:0Issues:0Issues:0

TileVania

Unity 2019.2.0f1 Project

Language:C#Stargazers:0Issues:0Issues:0

velociraptor

Dig Deeper....

License:NOASSERTIONStargazers:0Issues:0Issues:0