th3b3ginn3r's repositories
CVE-2022-26134-Exploit-Detection
This repository contains Yara rule and the method that a security investigator may want to use for CVE-2022-26134 threat hunting on their Linux confluence servers.
elastdocker
🐳 Elastic Stack (ELK) on Docker, preconfigured Out of the Box. Enables Logging, Metrics, APM, Alerting, ML, and SIEM features. Up with a Single Command. Now Supports v8.0!
aws_ir
Python installable command line utiltity for mitigation of host and key compromises.
docker-elk
The Elastic stack (ELK) powered by Docker and Compose.
flowlogs-reader
Command line tool and Python library for working with AWS VPC Flow Logs
jira
Python Jira library. Development chat available on https://matrix.to/#/#pycontribs:matrix.org
margaritashotgun
Remote Memory Acquisition Tool
meltdown-exploit
Meltdown Exploit PoC
mitreattack-python
A python module for working with ATT&CK
osquery-defense-kit
Production-ready detection & response queries for osquery
python-o365
A simple python library for interaction with Office 365.
sigma
Generic Signature Format for SIEM Systems
security_content
Splunk Security Content