blueteaming

There are 3 repositories under blueteaming topic.

ihebski / DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
infosec default-password pentesting bugbounty pentest cheatsheet cybersecurity blueteam offensive-security exploit blueteam-tools blueteaming offensive-security-projects soc
Language:Python 6217
Lockdoor-Framework
SofianeHamlaoui / Lockdoor-Framework
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
sofianehamlaoui penetration-testing pentesting pentest-tool pentesting-tools pentesting-python pentesters pentest-environment pentest-scripts hacking-tool hacking-tools cybersecurity cyber-security blackarch-packages redteaming redteam blueteaming hacking francais france
Language:Python 1484
emtunc / SlackPirate
Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
blueteam blueteaming python redteam redteaming slack slack-api
Language:Python 774
keraattin / EmailAnalyzer
With EmailAnalyzer you can analyze your suspicious emails. You can extract headers, links, and hashes from the .eml file and you can generate reports.
blueteaming cybersecurity dfir email forensics
Language:Python 253
DamonMohammadbagher / NativePayloads
All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming
blueteam blueteaming bypass-antivirus csharp defensive defensive-programming evasion evasion-attack memoryscanner monitoring-tool offensive offensive-security pentest pentesting redteam redteaming detection remote-thread-injection thread-injection
Language:C# 231
ashwin-patil / blue-teaming-with-kql
Repository with Sample KQL Query examples for Threat Hunting
azure azure-data-explorer azure-sentinel blueteaming kql loganalytics security siem threat-hunting
210
Viralmaniar / MurMurHash
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
blueteam blueteaming cybersecurity infosec murmurhash murmurhash3 phishing phishing-detection proactive-security purpleteam redteam redteaming security-tools threat-intelligence threathunting threatintel threatintelligence
Language:Python 117
alt3kx / wafaray
Enhance your malware detection with WAF + YARA (WAFARAY)
blueteam blueteaming pentesting security-tools threat-intelligence threathunting waf yara yara-rules
Language:Shell 108
simeononsecurity / Blue-Team-Tools
A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.
blueteam blueteaming ccdc
Language:HTML 96
DarkSpaceSecurity / DocEx
APT Emulation tool to exfiltrate sensitive .docx, .pptx, .xlsx, .pdf files
apt blackhat blueteam blueteaming blueteaming-tools hacking purpleteam purpleteaming redteam redteam-tools redteaming threatactors whitehat
Language:C++ 93
josh-morin / qradar
Unofficial third-party scripts, playbooks, and content for IBM QRadar & QRadar Community Edition.
blue-team blueteam blueteaming python3 qradar shell-script siem
Language:Python 81
5nacks / OSINTBookmarks
OSINT Bookmarks for Firefox / Chrome / Edge / Safari
osint-bookmarks osint osint-framework redteam redteaming cybersecurity blueteam blueteaming osint-reconnaissance cybersecurity-incidents
Language:HTML 61
DamonMohammadbagher / NativePayload_PE1
NativePayload_PE1/PE2 , Injecting Meterpreter Payload bytes into local Process via Delegation Technique + in-memory with delay Changing RWX to X or RX or (both) [Bypassing AVs]
assembly bypass-antivirus injecting blueteaming inmemory pentesting redteaming injecting-meterpreter-payload antivirus bypass bypassing pentest redteam
Language:C# 58
BlueTeam
Hacking-Notes / BlueTeam
This repo shares blue team security notes and resources for detecting and preventing cyber attacks. Topics covered include email, file, log, malware, memory forensics, and packet analysis.
blueteam blueteaming cybersecurity email-analysis log-analysis malware-analysis packet-capture system-hardening
42
Viralmaniar / DDWPasteRecon
DDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team to gain situational awareness of the organisation's web exposure on the pastesites. It Utilises Google's indexing of pastesites to gain targeted intelligence of the organisation. Blue & SOC teams can collect and analyse data from these indexed pastesites to better protect against unknown threats.
attacksurface blueteam blueteaming darkweb darkweb-hacking ddw hacking-tools iocs pastesites reconnaissance redteam redteam-tools redteaming soc threat-hunting threat-intelligence threat-sharing
Language:C# 38
ForbiddenProgrammer / awesome-cybersecurity-news
List of sources for cybersecurity news
cybersecurity cyber-security pentesting news blueteaming redteaming cybersecurity-blog cybersecurity-news awesome awesome-list
36
Yara-Repo
Fadavvi / Yara-Repo
A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/
yara yara-rules yara-signatures yara-forensics blueteam blueteaming threat-hunting threat-intelligence threatintel
Language:Shell 27
alt3kx / wafparan01d3
Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
blueteam blueteaming integrators pentesters pentesting security-tools threat-hunting threat-intelligence waf
Language:Python 25
atc-project / atc-mitigation
Actionable analytics designed to combat threats based on MITRE's ATT&CK.
mitre-attack mitre blueteam blueteaming soc cybersecurity
22
kathe
avuko / kathe
A GUI/REST interface to find similarities in large sets (think: binaries). Based on ssdeep.
blueteam blueteaming ssdeep redis score malware-analysis malware-research malware-detection
Language:JavaScript 19
DamonMohammadbagher / BEV4
BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files
blue-team-tool event-monitoring eventviewer real-time threat-hunting-via-sysmon threat-hunting-via-eventlogs atomic-red-team mitre-attack realtime-monitoring blueteaming
Language:C# 18
brootware / flarevm-up
Easy automated vagrant provisioning of Windows 10 with flarevm tools installed for Digital Forensics and Malware Analysis Lab.
blueteaming ctf ctf-tools dfir-automation digital-forensics forensics-tools malware-analysis reverse-engineering vagrant virtualbox windows-10
Language:HCL 16
Cybonto / OllaDeck
OllaDeck is a purple technology stack for Generative AI (text modality) cybersecurity. It provides a comprehensive set of tools for both blue team and red team operations in the context of text-based generative AI.
blueteaming cybersecurity cybersecurity-tools generative-ai llm-evaluation llms llmsecurity redteaming
Language:Python 16
ProtAAPP / wikiprot
Repositorio de documentación y referencias relativas al mundo de la ciberseguridad, creado y mantenido por la Comunidad de ProtAAPP
cybersecurity cyber-security blueteam blueteaming wiki civil-servants hacking
11
bocajspear1 / Blueteam-Crash-Course
Blue Team Crash Course
blueteam blueteaming education cny-hackathon
Language:HTML 7
jstnk9 / MISP
Here I'll store some scripts and other stuff related to MISP.
blueteaming dfir misp threat-hunting threat-intelligence
Language:Python 7
avuko / sb
Analysis of the Shadow Broker/ Equation Group dumps.
blueteaming blueteam
Language:Python 6
EroSmb
viktor02 / EroSmb
Fast SMB network scanner
smb network scanner enumeration tool python security infosec appsec pentest pentest-tool blueteam blueteaming redteam redteaming
Language:Python 5
paladin
Zeerg / paladin
A blueteam tool to simulate attacks using Atomic Red Team and other techniques.
attack cybersecurity golang blueteaming security automation mitre-attack mitre
Language:Go 5
Balzu / Security-Events-Explorer
A user-friendly and powerful tool to analyze Windows Security Events
active-directory active-directory-exploitation active-directory-security blueteam blueteaming event-viewer log-intelligence soc windows windows-security active-directory-authentication ceh cissp security-analysis security-operations security-tools white-hat windows-local-exploit windows-logon
Language:JavaScript 4
jkerai1 / VirusTotal-IP-powershell
Triage an IP using powershell
powershell virustotal virus ip malicious-ips threat-intelligence api virustotal-api api-rest asn country country-codes malicious blueteam blueteaming triage soc incident-response
Language:PowerShell 3
avuko / lymph
Generic Signature Format for System States
blueteam blueteaming
2
DamonMohammadbagher / BEV3
BasicEventViewer (BEV v3.0), this code will useful for All Blue Teamers.
eventviewer security windowseventviewer blueteam blueteaming threat-hunting-via-sysmon
Language:C# 2
hack-with-ethics / Vulnerablity-Checker-NVD
This Code is just lists the updated vulnerablities and cves in the version of some services like ftp,http and more
beautifulsoup4 hacking national-vulnerability-database nvd python requests vulnerability-scanners webscr blueteaming
Language:Python 2
jonasw234 / systeminfo.py
systeminfo command for offline system images
blueteaming windows forensics incident-response-tooling
Language:Python 2
RogueCyberSecurityChannel / PyCanary-Python-Canary-Token-Alternative
PyCanary: CMD line tool to monitor any directory for file access or file changes, log event, send basic alert to user, and dump and process information collected. There is also a background thread monitoring all created processes and logging them for later analysis.
antivirus blueteam blueteaming blueteaming-tools canary canary-tokens cyber-security cybersecurity edr huristic python threat-hunting windows-10 windows-11 logging multithreading process-monitor blueteam-tools
Language:Python 2

blueteaming

ihebski / DefaultCreds-cheat-sheet

SofianeHamlaoui / Lockdoor-Framework

emtunc / SlackPirate

keraattin / EmailAnalyzer

DamonMohammadbagher / NativePayloads

ashwin-patil / blue-teaming-with-kql

Viralmaniar / MurMurHash

alt3kx / wafaray

simeononsecurity / Blue-Team-Tools

DarkSpaceSecurity / DocEx

josh-morin / qradar

5nacks / OSINTBookmarks

DamonMohammadbagher / NativePayload_PE1

Hacking-Notes / BlueTeam

Viralmaniar / DDWPasteRecon

ForbiddenProgrammer / awesome-cybersecurity-news

Fadavvi / Yara-Repo

alt3kx / wafparan01d3

atc-project / atc-mitigation

avuko / kathe

DamonMohammadbagher / BEV4

brootware / flarevm-up

Cybonto / OllaDeck

ProtAAPP / wikiprot

bocajspear1 / Blueteam-Crash-Course

jstnk9 / MISP

avuko / sb

viktor02 / EroSmb

Zeerg / paladin

Balzu / Security-Events-Explorer

jkerai1 / VirusTotal-IP-powershell

avuko / lymph

DamonMohammadbagher / BEV3

hack-with-ethics / Vulnerablity-Checker-NVD

jonasw234 / systeminfo.py

RogueCyberSecurityChannel / PyCanary-Python-Canary-Token-Alternative