LI Zhenyuan's repositories
Knowledge-enhanced-Attack-Graph
AttacKG: Constructing Knowledge-enhanced Attack Graphs from Cyber Threat Intelligence Reports
AttacKG-for-Chinese
A Chinese version of Knowledge-enhanced-Attack-Graph.
Open_source_provenance_graph_repos
A collection of open-source provenance graph repos.
adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
li-zhenyuan
Config files for my GitHub profile.
2022-HW-POC
2022 护网行动 POC 整理
America-Against-America
《美国反对美国》是王沪宁先生在上世纪80年代末赴美观察写作的。我们知道在那个年代**对西方特别是美国的追捧有多高，所以突然看到一个学者在80年代就有如此清楚的认识，十分钦佩。由于网上只有效果很差的PDF扫描版，所以我想利用OCR技术和肉眼（人体OCR）来转成现代化的文本格式。目前已经全部完成。
attack-flow
Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.
Audit-log-analysis
Have fun with audit log analysis :)
caldera
Automated Adversary Emulation Platform
ChatGLM-6B
ChatGLM-6B：开源双语对话语言模型 | An Open Bilingual Dialogue Language Model
Creds
Some usefull Scripts and Executables for Pentest & Forensics
dronesploit
Drone pentesting framework console
ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Hitomi-Downloader
:cake: Desktop utility to download images/videos/music/text from various websites, and more.
joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript based on code property graphs
kestrel-lang
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
li-zhenyuan.github.io
AcadHomepage: A Modern and Responsive Academic Personal Homepage
LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
Mangle
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
obsidian-releases
Community plugins list, theme list, and releases of Obsidian.
Palantir
PalanTír: Optimizing Attack Provenance with Hardware-enhanced System Observability, CCS'22
pinduoduo_backdoor
拼多多apk内嵌提权代码，及动态下发dex分析
PublicArena
Public Arena dataset
siddhi
Stream Processing and Complex Event Processing Engine