blueteaming

There are 3 repositories under blueteaming topic.

Lockdoor-Framework
SofianeHamlaoui / Lockdoor-Framework
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
sofianehamlaoui penetration-testing pentesting pentest-tool pentesting-tools pentesting-python pentesters pentest-environment pentest-scripts hacking-tool hacking-tools cybersecurity cyber-security blackarch-packages redteaming redteam blueteaming hacking francais france
Language:Python 1297
emtunc / SlackPirate
Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
slack slack-api redteaming blueteaming redteam blueteam python
Language:Python 717
DamonMohammadbagher / NativePayloads
All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming
blueteam blueteaming bypass-antivirus csharp defensive defensive-programming evasion evasion-attack memoryscanner monitoring-tool offensive offensive-security pentest pentesting redteam redteaming detection remote-thread-injection thread-injection
Language:C# 217
keraattin / EmailAnalyzer
With EmailAnalyzer you can analyze your suspicious emails. You can extract headers, links, and hashes from the .eml file and you can generate reports.
blueteaming cybersecurity dfir email forensics
Language:Python 205
ashwin-patil / blue-teaming-with-kql
Repository with Sample KQL Query examples for Threat Hunting
threat-hunting blueteaming azure-data-explorer azure-sentinel kql security siem loganalytics azure
192
Viralmaniar / MurMurHash
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
redteam blueteam phishing phishing-detection cybersecurity infosec security-tools redteaming threathunting threat-intelligence threatintel threatintelligence proactive-security murmurhash murmurhash3 blueteaming purpleteam
Language:Python 110
alt3kx / wafaray
Enhance your malware detection with WAF + YARA (WAFARAY)
blueteam blueteaming pentesting security-tools threat-intelligence threathunting waf yara yara-rules
Language:Shell 106
simeononsecurity / Blue-Team-Tools
A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.
blueteam blueteaming ccdc
Language:HTML 82
DamonMohammadbagher / NativePayload_PE1
NativePayload_PE1/PE2 , Injecting Meterpreter Payload bytes into local Process via Delegation Technique + in-memory with delay Changing RWX to X or RX or (both) [Bypassing AVs]
assembly bypass-antivirus injecting blueteaming inmemory pentesting redteaming injecting-meterpreter-payload antivirus bypass bypassing pentest redteam
Language:C# 57
5nacks / OSINTBookmarks
OSINT Bookmarks for Firefox / Chrome / Edge / Safari
osint-bookmarks osint osint-framework redteam redteaming cybersecurity blueteam blueteaming osint-reconnaissance cybersecurity-incidents
Language:HTML 50
Viralmaniar / DDWPasteRecon
DDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team to gain situational awareness of the organisation's web exposure on the pastesites. It Utilises Google's indexing of pastesites to gain targeted intelligence of the organisation. Blue & SOC teams can collect and analyse data from these indexed pastesites to better protect against unknown threats.
attacksurface blueteam blueteaming darkweb darkweb-hacking ddw hacking-tools iocs pastesites reconnaissance redteam redteam-tools redteaming soc threat-hunting threat-intelligence threat-sharing
Language:C# 37
ForbiddenProgrammer / awesome-cybersecurity-news
List of sources for cybersecurity news
awesome awesome-list blueteaming cyber-security cybersecurity cybersecurity-blog cybersecurity-news news pentesting redteaming
29
Yara-Repo
Fadavvi / Yara-Repo
A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/
yara yara-rules yara-signatures yara-forensics blueteam blueteaming threat-hunting threat-intelligence threatintel
Language:Shell 26
alt3kx / wafparan01d3
Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
blueteam blueteaming integrators pentesters pentesting security-tools threat-hunting threat-intelligence waf
Language:Python 25
atc-project / atc-mitigation
Actionable analytics designed to combat threats based on MITRE's ATT&CK.
mitre-attack mitre blueteam blueteaming soc cybersecurity
21
kathe
avuko / kathe
A GUI/REST interface to find similarities in large sets (think: binaries). Based on ssdeep.
blueteam blueteaming ssdeep redis score malware-analysis malware-research malware-detection
Language:JavaScript 19
DamonMohammadbagher / BEV4
BasicEventViewer4 (BEV v4.0), this code will useful for All Blue/Purple Teams , RealTime Monitoring Sysmon Events , Mitre Attack Detections via yaml files
blue-team-tool event-monitoring eventviewer real-time threat-hunting-via-sysmon threat-hunting-via-eventlogs atomic-red-team mitre-attack realtime-monitoring blueteaming
Language:C# 16
brootware / flarevm-up
Easy automated vagrant provisioning of Windows 10 with flarevm tools installed for Digital Forensics and Malware Analysis Lab.
vagrant virtualbox digital-forensics forensics-tools blueteaming ctf-tools ctf dfir-automation malware-analysis reverse-engineering windows-10
Language:HCL 13
ProtAAPP / wikiprot
Repositorio de documentación y referencias relativas al mundo de la ciberseguridad, creado y mantenido por la Comunidad de ProtAAPP
cybersecurity cyber-security blueteam blueteaming wiki civil-servants hacking
9
bocajspear1 / Blueteam-Crash-Course
Blue Team Crash Course
blueteam blueteaming education cny-hackathon
Language:HTML 7
jstnk9 / MISP
Here I'll store some scripts and other stuff related to MISP.
blueteaming dfir misp threat-hunting threat-intelligence
Language:Python 7
avuko / sb
Analysis of the Shadow Broker/ Equation Group dumps.
blueteaming blueteam
Language:Python 5
Balzu / Security-Events-Explorer
A user-friendly and powerful tool to analyze Windows Security Events
active-directory active-directory-exploitation active-directory-security blueteam blueteaming event-viewer log-intelligence soc windows windows-security active-directory-authentication ceh cissp security-analysis security-operations security-tools white-hat windows-local-exploit windows-logon
Language:JavaScript 4
paladin
Zeerg / paladin
A blueteam tool to simulate attacks using Atomic Red Team and other techniques.
attack automation blueteaming cybersecurity golang mitre mitre-attack security
Language:Go 4
EroSmb
viktor02 / EroSmb
Fast SMB network scanner
smb network scanner enumeration tool python security infosec appsec pentest pentest-tool blueteam blueteaming redteam redteaming
Language:Python 3
avuko / lymph
Generic Signature Format for System States
blueteam blueteaming
2
DamonMohammadbagher / BEV3
BasicEventViewer (BEV v3.0), this code will useful for All Blue Teamers.
eventviewer security windowseventviewer blueteam blueteaming threat-hunting-via-sysmon
Language:C# 2
jkerai1 / VirusTotal-IP-powershell
Triage an IP using powershell
powershell virustotal virus ip malicious-ips threat-intelligence api virustotal-api api-rest asn country country-codes malicious blueteam blueteaming triage soc incident-response
Language:PowerShell 2
jonasw234 / systeminfo.py
systeminfo command for offline system images
blueteaming windows forensics incident-response-tooling
Language:Python 2
pakoti / Awesome_SOC1
a complete course in SOC tier1,notes slides and codes
security soc1 blueteam blueteam-tools blueteaming
Language:PowerShell 2
brootware / staging.github.io
A blog for ctf write-ups, automation projects and such.
ctf-writeups ctf-challenges blueteaming github-pages projects blog blogging jekyll
Language:Shell 1
MisanZx / SecureVault
Your Fortress of Cyber Security Knowledge
cybersecurity blueteaming penetration-testing threat-hunting
1
txuswashere / BlueTeam
Blue Team resources and tools
blue-team blue-teaming blue-teaming-tools blue-teams blueteam blueteam-tools blueteaming
1
IvorRankin / MITRE-D3FEND-Resources
A collection of tools & guides for the planning and implementation of MITRE D3FEND. This repository is independent research and is not an official nor a sanctioned MITRE D3FEND resource.
d3fend mitre blueteaming
0
First-Edition
ScaryCon / First-Edition
ScaryCon is a South African conference promoted by ScaryByte to demonstrate cybersecurity and cyber intelligence in its reality.
blueteaming conference counterespionage cyberintelligence cybersecurity interception lawenforcement osint presentation redteaming sigint simulation socialengineering talk cyberthreatintelligence risk southafrica
0
C3LKO / Security-Blue-Team
Security Blue Team - path progress
blueteam blueteam-tools blueteaming cyber cyber-security cybersecurity defence defence-system-team security

blueteaming

SofianeHamlaoui / Lockdoor-Framework

emtunc / SlackPirate

DamonMohammadbagher / NativePayloads

keraattin / EmailAnalyzer

ashwin-patil / blue-teaming-with-kql

Viralmaniar / MurMurHash

alt3kx / wafaray

simeononsecurity / Blue-Team-Tools

DamonMohammadbagher / NativePayload_PE1

5nacks / OSINTBookmarks

Viralmaniar / DDWPasteRecon

ForbiddenProgrammer / awesome-cybersecurity-news

Fadavvi / Yara-Repo

alt3kx / wafparan01d3

atc-project / atc-mitigation

avuko / kathe

DamonMohammadbagher / BEV4

brootware / flarevm-up

ProtAAPP / wikiprot

bocajspear1 / Blueteam-Crash-Course

jstnk9 / MISP

avuko / sb

Balzu / Security-Events-Explorer

Zeerg / paladin

viktor02 / EroSmb

avuko / lymph

DamonMohammadbagher / BEV3

jkerai1 / VirusTotal-IP-powershell

jonasw234 / systeminfo.py

pakoti / Awesome_SOC1

brootware / staging.github.io

MisanZx / SecureVault

txuswashere / BlueTeam

IvorRankin / MITRE-D3FEND-Resources

ScaryCon / First-Edition

C3LKO / Security-Blue-Team