midnightslacker

ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

sliver

Adversary Emulation Framework

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

Mythic

A collaborative, multi-platform, red teaming framework

Microsoft-365-Defender-Hunting-Queries

Sample queries for Advanced hunting in Microsoft 365 Defender

HoneyBadger

Lime-Downloader

Simple Malware Downloader

AsyncRAT-C-Sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

vector

A high-performance observability data pipeline.

CrossLinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

TikiTorch

Process Injection

awesome-jupyter

A curated list of awesome Jupyter projects, libraries and resources

awesome-python

An opinionated list of awesome Python frameworks, libraries, software and resources.

dopamine

Dopamine is a research framework for fast prototyping of reinforcement learning algorithms.

flashmingo

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

mindforger

Thinking notebook and Markdown editor with LLM wingman.

ghidra

Ghidra is a software reverse engineering (SRE) framework

beagle

Beagle is an incident response and digital forensics tool which transforms security logs and data into graphs.

mindsdb

The platform for building AI from enterprise data

xori

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

discord.py

An API wrapper for Discord written in Python.

pyro

Deep universal probabilistic programming with Python and PyTorch

ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

ATTACK-Tools

Utilities for MITRE™ ATT&CK

ATTACK-Python-Client

Python Script to access ATT&CK content available in STIX via a public TAXII server

kubeflow

Machine Learning Toolkit for Kubernetes

CAPE

Malware Configuration And Payload Extraction

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader