tiagosequeira

APTnotes

Various public documents, whitepapers and articles about APT campaigns

APT_REPORT

Interesting APT Report Collection And Some Special IOC

msticpy

Microsoft Threat Intelligence Security Tools

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

data

APTnotes data

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

Ransomware-Tool-Matrix

A resource containing all the tools each ransomware gangs uses

yara-x

A rewrite of YARA in Rust.

ocsf-schema

OCSF Schema

stride-gpt

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

vulnrichment

A repo to conduct vulnerability enrichment.

tram

TRAM is an open-source platform designed to advance research into automating the mapping of cyber threat intelligence reports to MITRE ATT&CK®.

galah

Galah: An LLM-powered web honeypot.

APT-Attack-Simulation

This repository is a compilation of all APT simulations that target many vital sectors,both private and governmental. The simulation includes written tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and many other tools that attackers might have used in actual attacks. These tools and TTPs are simulated here.

awesome_threat_intel_blogs

A curated list of Awesome Threat Intelligence Blogs

cti-blueprints

CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable reports more consistently and efficiently.

Threat-Actors-use-of-Artifical-Intelligence

CTI-Analyst-Challenge

An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.

misp-playbooks

MISP Playbooks

DocIntel

Open Source Platform for storing, organizing, and searching documents related to cyber threats

Sigma-Rules

A repository of my own Sigma detection rules.

diana

Save toil in security operations with: Detection & Intelligence Analysis for New Alerts (D.I.A.N.A. )

insider-threat-ttp-kb

The principal objective of this project is to develop a knowledge base of the tactics, techniques, and procedures (TTPs) used by insiders in the IT environment. It will establish an Insider Threat TTP Knowledge Base, built upon data collected on insider threat incidents and lessons learned and experience from the ATT&CK knowledge base.

n6

Automated handling of data feeds for security teams

VeilTransfer

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture.

notes

Full of public notes and Utilities

cyber-threat-profiling

A library of reference materials, tools, and other resources to aid threat profiling, threat quantification, and cyber adversary defense

misp2sentinel

MISP to Sentinel integration

pyHIDS

A HIDS (host-based intrusion detection system) for verifying the integrity of a system.

cti-llm

An LLM for CTI reports - to be presented at FIRST Fukuoka 2024