blue-team

There are 63 repositories under blue-team topic.

decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
awesome-list security security-hardening security-tools windows-hardening cybersecurity cyber-security infosec best-practices cis-benchmarks blueteam blue-team computer-security linux-hardening
5666
Trusted-AI / adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
adversarial-attacks adversarial-examples adversarial-machine-learning ai artificial-intelligence attack blue-team evasion extraction inference machine-learning poisoning privacy python red-team trusted-ai trustworthy-ai
Language:Python 5123
fabacab / awesome-cybersecurity-blueteam
:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
awesome-list cybersecurity blue-team defensive-security security infosec computer-security
4581
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2994
RedEye
cisagov / RedEye
RedEye is a visual analytic tool supporting Red & Blue Team operations
blue-team cybersecurity red-team
Language:TypeScript 2700
Bashfuscator / Bashfuscator
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
bash linux linux-shell obfuscation red-team blue-team evasion incident-response infosec
Language:Python 1733
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
hacking windows assembly assembler cpp cplusplus ida ida-pro idapro reverse-engineering blue-team training training-materials training-material cybersecurity hack cyber cyber-threat-intelligence win32api microsoft-windows
Language:C 1411
Viralmaniar / BigBountyRecon
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
osint recon reconnaissance cybersecurity offensive-security pentesting pentest-tool bugbounty bugbounty-tool bugbountytips red-team red-teaming blue-team purple-team purple-teams
Language:C# 1318
Qianlitp / WatchAD
AD Security Intrusion Detection System
security active-directory python3 defcon27 intrusion-detection-system kerberos event-log ntlm blue-team watchad
Language:Python 1291
BLUESPAWN
ION28 / BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
active-defense anti-virus blue-team edr mitre-attack security security-tools threat-hunting windows
Language:C++ 1266
sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
siem threat-hunting azure-sentinel mitre-attack sysmon sysmon-config azure blue-team cybersecurity logging security-tools detection kql workbooks terraform-azure
1065
TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
automation blue-team blue-teams hacking hacking-tool hacking-tools infosec pentest pentest-tool pentest-tools pentesting red-team red-teams security security-tools
Language:Python 1009
Puliczek / awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
blue-team bugbounttips bugbounty cve-2021-44228 cybersecurity exploit log4j pentesting poc red-team security security-writeups writeups
880
satan1a / awesome-cybersecurity-blueteam-cn
网络安全 · 攻防对抗 · 蓝队清单，中文版
blue-team cybersecurity attack-defense chinese-translation awesome
Language:HTML 857
opensquat
atenreiro / opensquat
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
threat-intelligence typosquatting cybersquatting phishing-detection phishing osint security-tools domain-squatting threat-hunting phishing-domains domain-name cybersecurity malware python blue-team infosec homograph-attack scanner
Language:Python 767
Awesome-OSINT-For-Everything
Astrosp / Awesome-OSINT-For-Everything
OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.
blue-team bugbounty information-gathering osint osint-tools osinttool recon reconnaissance red-team security-tools web
Language:Shell 612
awslabs / aws-cloudsaga
AWS CloudSaga - Simulate security events in AWS
aws blue-team incident-response-tooling purple-team red-teaming security security-audit
Language:Python 450
dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
auditing blue-team graphql hacking hardening penetration-testing red-team security
Language:Python 432
slack-watchman
PaperMtn / slack-watchman
Slack enumeration and exposed secrets detection tool
blue-team blueteam cybersecurity infosec monitoring purple-team purpleteam red-team redteam slack slack-api slack-workspaces tools
Language:Python 374
codeexpress / respounder
Respounder detects presence of responder in the network.
responder golang network-security-monitoring network-security hackers llmnr computer-security blue-team attack-prevention attack-defense
Language:Go 315
joeavanzato / Trawler
PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.
dfir powershell blue-team incident-response malware persistence windows
Language:PowerShell 315
activecm / rita
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
beacons blue-team c2 command-and-control cyber-security network-traffic-analysis threat-hunting zeek log-analysis anomaly-detection incident-response network-monitoring threat-intelligence intrusion-detection security-tools c2-detection
Language:Go 258
Kirtar22 / Litmus_Test
Detecting ATT&CK techniques & tactics for Linux
blue-team defensive-security incident-response linux-hunting mitre-attack red-team security-operations threathunting
Language:Roff 258
awslabs / assisted-log-enabler-for-aws
Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.
aws blue-team flow-logs incident-response logging security-tools
Language:Python 253
Viralmaniar / Remote-Desktop-Caching-
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
blueteam redteam hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring blue-team hacking-tools hacking-attack-tools purpleteam
Language:Python 213
NoMoreCookies
AdvDebug / NoMoreCookies
Browser Protector against various stealers, written in C# & C/C++.
antivirus blue-team browser hooking protection rat stealer anti-stealer backdoor hook remote dll-injection malware malware-protection password-stealer remote-access-trojan security csharp grabber security-tools
Language:C# 201
gitlab-watchman
PaperMtn / gitlab-watchman
Finding exposed secrets and personal data in GitLab
blueteam blue-team cybersecurity infosec gitlab tools redteam red-team gitlab-watchman purpleteam purple-team gitlab-api monitoring dlp data-loss-prevention
Language:Python 197
dorothy
elastic / dorothy
Dorothy is a tool to test security monitoring and detection for Okta environments
security cybersecurity blue-team security-tools red-team infosec
Language:Python 179
bulwark
softrams / bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
security-tools vulnerability-management angular typeorm typescript nodejs express webappsec appsec application-security vulnerability-report pentesting vulnerability-assessment security-tool penetration-testing-tools vulnerability-research bugbounty blue-team red-team
Language:TypeScript 179
juumla
oppsec / juumla
🦁 Identify Joomla version, scan for vulnerabilities and sensitive files
joomla scanner pentest tool red-team blue-team infosec docker python hacktoberfest
Language:Python 170
KC7-Foundation / kc7
A cybersecurity game in Azure Data Explorer
cybersecurity education blue-team cyber-defense incident-response threat-intelligence python
Language:Python 168
mytechnotalent / turbo-scanner
A port scanner and service detection tool that uses 1000 goroutines at once to scan any hosts IP or FQDN with the sole purpose of testing your own network to ensure there are no malicious services running.
go golang ukraine russian tor tcp tcp-scanner port-scanner portscanner russia cyber cybersecurity malware malware-analysis defensive-security security security-tools blue-team blue-teams
Language:Go 153
PI-Defender / pi-defender
Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
anti-injection anti-malware antivirus blue-team defense driver kernel malware process-injection security windows
Language:C++ 151
pbnj / infosec-interview-questions
🗒️ A [work-in-progress] collection for interview questions for Information Security roles
infosec interview questions information-security application-security red-team blue-team
135
iknowjason / BlueCloud
Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
cyberrange cyber-range edr-testing pentesting blue-team dfir-automation dfir purpleteam
Language:HTML 129
fierceoj / ShonyDanza
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
shodan shodan-api shodan-python reconnaissance red-team blue-team purple-team scanning information-gathering shonydanza pre-configure exploits vulnerability-identification vulnerability-detection malware-identification malware-detection pentesting penetration-testing security-tools security-research
Language:Python 120

blue-team

decalage2 / awesome-security-hardening

Trusted-AI / adversarial-robustness-toolbox

fabacab / awesome-cybersecurity-blueteam

A-poc / BlueTeam-Tools

cisagov / RedEye

Bashfuscator / Bashfuscator

mytechnotalent / Hacking-Windows

Viralmaniar / BigBountyRecon

Qianlitp / WatchAD

ION28 / BLUESPAWN

netevert / sentinel-attack

TryCatchHCF / DumpsterFire

Puliczek / awesome-list-of-secrets-in-environment-variables

satan1a / awesome-cybersecurity-blueteam-cn

atenreiro / opensquat

Astrosp / Awesome-OSINT-For-Everything

awslabs / aws-cloudsaga

dolevf / graphql-cop

PaperMtn / slack-watchman

codeexpress / respounder

joeavanzato / Trawler

activecm / rita

Kirtar22 / Litmus_Test

awslabs / assisted-log-enabler-for-aws

Viralmaniar / Remote-Desktop-Caching-

AdvDebug / NoMoreCookies

PaperMtn / gitlab-watchman

elastic / dorothy

softrams / bulwark

oppsec / juumla

KC7-Foundation / kc7

mytechnotalent / turbo-scanner

PI-Defender / pi-defender

pbnj / infosec-interview-questions

iknowjason / BlueCloud

fierceoj / ShonyDanza