Ondrej Sramek's starred repositories
awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
cyberchef-recipes
A list of cyber-chef recipes and curated links
awesome-intelligence
A collaboratively curated list of awesome Open-Source Intelligence (OSINT) Resources
Ukraine-Cyber-Operations
Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine.
SysmonSimulator
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
misp-warninglists
Warning lists to inform users of MISP about potential false-positives or other information in indicators
artifactcollector
🚨 The artifactcollector is a customizable agent to collect forensic artifacts on any Windows, macOS or Linux system
Microsoft-Sentinel-SecOps
Microsoft Sentinel SOC Operations
Business-Email-Compromise-Guide
The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Office 365 environment. Each step is intended to guide the process of identifying, collecting and analysing activity associated with BEC intrusions.
DFIR_Resources_REvil_Kaseya
Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
Invoke-Forensics
Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.
AdvancedHunting
Advanced Hunting Queries for Microsoft Security Products
awesome-chatgpt-prompts-cybersecurity
网络安全chatgpt指令集，训练chatgpt成为一名网络安全专家
incidents-opendata
Data ke kybernetickým incidentům