blue-team

There are 54 repositories under blue-team topic.

decalage2 / awesome-security-hardening
A collection of awesome security hardening guides, tools and other resources
awesome-list security security-hardening security-tools windows-hardening cybersecurity cyber-security infosec best-practices cis-benchmarks blueteam blue-team computer-security linux-hardening
4935
Trusted-AI / adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
python attack adversarial-machine-learning poisoning trusted-ai artificial-intelligence extraction adversarial-attacks adversarial-examples evasion inference privacy ai trustworthy-ai red-team blue-team machine-learning
Language:Python 4444
fabacab / awesome-cybersecurity-blueteam
:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.
awesome-list blue-team computer-security cybersecurity defensive-security infosec security
4001
RedEye
cisagov / RedEye
RedEye is a visual analytic tool supporting Red & Blue Team operations
blue-team cybersecurity red-team
Language:TypeScript 2610
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2334
Bashfuscator / Bashfuscator
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
bash linux linux-shell obfuscation red-team blue-team evasion incident-response infosec
Language:Python 1501
mytechnotalent / Hacking-Windows
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
assembler assembly blue-team cplusplus cpp cyber cyber-threat-intelligence cybersecurity hack hacking ida ida-pro idapro microsoft-windows reverse-engineering training training-material training-materials win32api windows
Language:C 1290
Qianlitp / WatchAD
AD Security Intrusion Detection System
security active-directory python3 defcon27 intrusion-detection-system kerberos event-log ntlm blue-team watchad
Language:Python 1274
BLUESPAWN
ION28 / BLUESPAWN
An Active Defense and EDR software to empower Blue Teams
active-defense anti-virus blue-team edr mitre-attack security security-tools threat-hunting windows
Language:C++ 1206
Viralmaniar / BigBountyRecon
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
osint recon reconnaissance cybersecurity offensive-security pentesting pentest-tool bugbounty bugbounty-tool bugbountytips red-team red-teaming blue-team purple-team purple-teams
Language:C# 1099
sentinel-attack
netevert / sentinel-attack
Tools to rapidly deploy a threat hunting capability on Azure Sentinel that leverages Sysmon and MITRE ATT&CK
siem threat-hunting azure-sentinel mitre-attack sysmon sysmon-config azure blue-team cybersecurity logging security-tools detection kql workbooks terraform-azure
Language:HCL 1037
TryCatchHCF / DumpsterFire
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
automation blue-team blue-teams hacking hacking-tool hacking-tools infosec pentest pentest-tool pentest-tools pentesting red-team red-teams security security-tools
Language:Python 964
Puliczek / awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
blue-team bugbounttips bugbounty cve-2021-44228 cybersecurity exploit log4j pentesting poc red-team security security-writeups writeups
848
satan1a / awesome-cybersecurity-blueteam-cn
网络安全 · 攻防对抗 · 蓝队清单，中文版
attack-defense awesome blue-team chinese-translation cybersecurity
Language:HTML 729
opensquat
atenreiro / opensquat
The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains.
threat-intelligence typosquatting cybersquatting phishing-detection phishing osint security-tools domain-squatting threat-hunting phishing-domains domain-name cybersecurity malware python blue-team infosec homograph-attack scanner
Language:Python 648
awslabs / aws-cloudsaga
AWS CloudSaga - Simulate security events in AWS
aws security security-audit red-teaming blue-team purple-team incident-response-tooling
Language:Python 421
codeexpress / respounder
Respounder detects presence of responder in the network.
responder golang network-security-monitoring network-security hackers llmnr computer-security blue-team attack-prevention attack-defense
Language:Go 311
slack-watchman
PaperMtn / slack-watchman
Slack enumeration and exposed secrets detection tool
blueteam blue-team cybersecurity infosec slack tools redteam red-team purpleteam purple-team slack-api slack-workspaces monitoring
Language:Python 289
joeavanzato / Trawler
PowerShell script to help Incident Responders discover potential adversary persistence mechanisms.
blue-team dfir incident-response malware persistence powershell windows
Language:PowerShell 287
dolevf / graphql-cop
Security Auditor Utility for GraphQL APIs
auditing blue-team graphql hacking hardening penetration-testing red-team security
Language:Python 267
Kirtar22 / Litmus_Test
Detecting ATT&CK techniques & tactics for Linux
blue-team defensive-security incident-response linux-hunting mitre-attack red-team security-operations threathunting
Language:Roff 251
Awesome-OSINT-For-Everything
Astrosp / Awesome-OSINT-For-Everything
OSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.
information-gathering osint security-tools web bugbounty recon reconnaissance osint-tools osinttool blue-team red-team
Language:JavaScript 249
Viralmaniar / Remote-Desktop-Caching-
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
blueteam redteam hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring blue-team hacking-tools hacking-attack-tools purpleteam
Language:Python 209
awslabs / assisted-log-enabler-for-aws
Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.
aws blue-team flow-logs incident-response logging security-tools
Language:Python 208
ZeroMemoryEx / Handle-Ripper
Windows handle hijacker
blue-team bypass-av red-team win32 windows evasion-attack malware-development malware-research handle-hijacking
Language:C++ 189
gitlab-watchman
PaperMtn / gitlab-watchman
Finding exposed secrets and personal data in GitLab
blueteam blue-team cybersecurity infosec gitlab tools redteam red-team gitlab-watchman purpleteam purple-team gitlab-api monitoring dlp data-loss-prevention
Language:Python 187
bulwark
softrams / bulwark
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
security-tools vulnerability-management angular typeorm typescript nodejs express webappsec appsec application-security vulnerability-report pentesting vulnerability-assessment security-tool penetration-testing-tools vulnerability-research bugbounty blue-team red-team
Language:TypeScript 177
NoMoreCookies
AdvDebug / NoMoreCookies
Browser Protector against various stealers, written in C# & C/C++.
antivirus blue-team browser hooking protection rat stealer anti-stealer backdoor hook remote dll-injection malware malware-protection password-stealer remote-access-trojan security csharp grabber security-tools
Language:C# 169
juumla
oppsec / juumla
🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files
joomla scanner pentest tool red-team blue-team infosec docker python hacktoberfest
Language:Python 159
KC7-Foundation / kc7
A cybersecurity game in Azure Data Explorer
blue-team cyber-defense cybersecurity education incident-response python threat-intelligence
Language:Python 156
PI-Defender / pi-defender
Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
anti-injection anti-malware antivirus blue-team defense driver kernel malware process-injection security windows
Language:C++ 147
dorothy
elastic / dorothy
Dorothy is a tool to test security monitoring and detection for Okta environments
blue-team cybersecurity infosec red-team security security-tools
Language:Python 144
mytechnotalent / turbo-scanner
A port scanner and service detection tool that uses 1000 goroutines at once to scan any hosts's ip or fqdn with the sole purpose of testing your own network to ensure there are no malicious services running.
blue-team blue-teams cyber cybersecurity defensive-security go golang malware malware-analysis port-scanner portscanner russia russian security security-tools tcp tcp-scanner tor ukraine
Language:Go 140
pbnj / infosec-interview-questions
🗒️ A [work-in-progress] collection for interview questions for Information Security roles
application-security blue-team information-security infosec interview questions red-team
128
iknowjason / BlueCloud
Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
blue-team cyber-range cyberrange dfir dfir-automation edr-testing pentesting purpleteam
Language:HTML 119
fierceoj / ShonyDanza
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
shodan shodan-api shodan-python reconnaissance red-team blue-team purple-team scanning information-gathering shonydanza pre-configure exploits vulnerability-identification vulnerability-detection malware-identification malware-detection pentesting penetration-testing security-tools security-research
Language:Python 113

blue-team

decalage2 / awesome-security-hardening

Trusted-AI / adversarial-robustness-toolbox

fabacab / awesome-cybersecurity-blueteam

cisagov / RedEye

A-poc / BlueTeam-Tools

Bashfuscator / Bashfuscator

mytechnotalent / Hacking-Windows

Qianlitp / WatchAD

ION28 / BLUESPAWN

Viralmaniar / BigBountyRecon

netevert / sentinel-attack

TryCatchHCF / DumpsterFire

Puliczek / awesome-list-of-secrets-in-environment-variables

satan1a / awesome-cybersecurity-blueteam-cn

atenreiro / opensquat

awslabs / aws-cloudsaga

codeexpress / respounder

PaperMtn / slack-watchman

joeavanzato / Trawler

dolevf / graphql-cop

Kirtar22 / Litmus_Test

Astrosp / Awesome-OSINT-For-Everything

Viralmaniar / Remote-Desktop-Caching-

awslabs / assisted-log-enabler-for-aws

ZeroMemoryEx / Handle-Ripper

PaperMtn / gitlab-watchman

softrams / bulwark

AdvDebug / NoMoreCookies

oppsec / juumla

KC7-Foundation / kc7

PI-Defender / pi-defender

elastic / dorothy

mytechnotalent / turbo-scanner

pbnj / infosec-interview-questions

iknowjason / BlueCloud

fierceoj / ShonyDanza