purpleteam

There are 16 repositories under purpleteam topic.

LOLBAS-Project / LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
lolbins lolscripts redteam blueteam purpleteam dfir living-off-the-land
Language:XSLT 6632
HackTools
LasCC / HackTools
The all-in-one browser extension for offensive security professionals 🛠
bug-bounty cheatsheet chrome-extension firefox-addon hack hack-tools hackbar hacking hackingtools hacktools metasploit msfvenom payloads purpleteam redteam reverse-shell web-pentesters xss-payloads
Language:TypeScript 5478
api0cradle / UltimateAppLockerByPassList
The goal of this repository is to document the most common techniques to bypass AppLocker.
applocker bypass awl rules redteam blueteam purpleteam
Language:PowerShell 1817
api0cradle / LOLBAS
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
lolbins lolscripts redteam blueteam purpleteam dfir living-off-the-land
Language:XSLT 1582
ahmedkhlief / APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
threat-hunting purpleteam python3 windows-eventlog apt-attacks incident-response forensic-analysis windows-event-logs
Language:Python 1156
cyb3rxp / awesome-soc
A collection of sources of documentation, as well as field best practices, to build/run a SOC
cert csirt detection soc siem sirp soa soar tip architecture incident-response management mitre-attack purpleteam risk-management ttp
1031
PlumHound
PlumHound / PlumHound
Bloodhound for Blue and Purple Teams
active directory blueteam purpleteam bloodhound bloodhoundad infosec active-directory bloodhoundad-cypher-queries purple-teams plumhound-tasks bloodhoundad-pathfinding-engine neo4j bluehound attack-paths activedirectory cypher-query redteam reporting-tool
Language:Python 1022
FalconForceTeam / FalconFriday
Hunting queries and detections
kql blueteam hunting purpleteam sentinel defender-atp defender-for-endpoint
657
ch33r10 / EnterprisePurpleTeaming
Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.
adversary adversary-emulation adversary-simulation adversaryemulation purple-team purpleteam red-team redteam
621
bluecapesecurity / PWF
Practical Windows Forensics Training
cybersecurity forensics blueteam purpleteam
Language:PowerShell 546
scythe-io / purple-team-exercise-framework
Purple Team Exercise Framework
ptef purpleteamexerciseframework adversaryemulation purpleteam redteam blueteam adversarysimulation
542
iknowjason / PurpleCloud
A little tool to play with Azure Identity - Azure Active Directory lab creation tool
azure pentest purpleteam siem dfir dfir-automation azure-lab
Language:Python 479
GoodHound
idnahacks / GoodHound
Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
active-directory activedirectory bloodhound blueteam cybersecurity neo4j purpleteam py2neo python python3 redteam
Language:Python 439
slack-watchman
PaperMtn / slack-watchman
Slack enumeration and exposed secrets detection tool
blueteam blue-team cybersecurity infosec slack tools redteam red-team purpleteam purple-team slack-api slack-workspaces monitoring
Language:Python 290
DefensiveOrigins / AtomicPurpleTeam
Atomic Purple Team Framework and Lifecycle
purpleteam hunting attack attack-defense attack-detection lifecycle-management lifecycle famework
272
Ziconius / FudgeC2
FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.
powershell security-tools security command-and-control c2 python3 redteam readteaming purpleteam implant cybersecurity offensive-security post-exploitation
Language:Python 245
Viralmaniar / Remote-Desktop-Caching-
This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.
blueteam redteam hacking internal-pentest penetration-testing redteaming forensics forensics-investigations forensic-analysis infrastructure-monitoring blue-team hacking-tools hacking-attack-tools purpleteam
Language:Python 210
awesome-lists
mthcht / awesome-lists
Security lists for SOC detections
blueteam hacktools keywords list offensive-security purpleteam redteam security soc awesome awesome-list awesome-lists cti ioc misp open-source
Language:PowerShell 206
AnLoMinus / Diablo
Diablo ~ Hacking / Pentesting & Reporting
diablo hacking pentesting reporting scanning blueteam purpleteam redteam reporter portscan portscanner
Language:Shell 190
gitlab-watchman
PaperMtn / gitlab-watchman
Finding exposed secrets and personal data in GitLab
blueteam blue-team cybersecurity infosec gitlab tools redteam red-team gitlab-watchman purpleteam purple-team gitlab-api monitoring dlp data-loss-prevention
Language:Python 188
Atomic-Red-Team-Intelligence-C2
blackbotsecurity / Atomic-Red-Team-Intelligence-C2
ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.
redteam dotnet csharp python3 red-teams offensive-security post-exploitation mitre-attack powershell-scripts purpleteam purple-team
Language:Python 165
DefensiveOrigins / APT-Lab-Terraform
Purple Teaming Attack & Hunt Lab - Terraform
terraform azure purpleteam labs
Language:HCL 156
TH3xACE / EDR-Test
Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].
aggressor-scripts cobalt-strike cobaltstrike edr purple-team purpleteam mitre-attack
143
Purpleteam
mthcht / Purpleteam
Purpleteam scripts simulation & Detection - trigger events for SOC detections
blueteam detection linux mitre-attack offensive-scripts purpleteam redteam security siem simulation soc tactics techniques windows awesome awesome-list ioc threat-hunting threathunting detection-engineering
Language:PowerShell 123
iknowjason / BlueCloud
Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.
cyberrange cyber-range edr-testing pentesting blue-team dfir-automation dfir purpleteam
Language:HTML 120
purpleteam-labs / purpleteam
CLI component of OWASP PurpleTeam
security-regression-testing application-security cloud-security build-tool ci purpleteam cli web-security devsecops devsecops-pipeline security-testing hacktoberfest
Language:JavaScript 113
Viralmaniar / MurMurHash
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
redteam blueteam phishing phishing-detection cybersecurity infosec security-tools redteaming threathunting threat-intelligence threatintel threatintelligence proactive-security murmurhash murmurhash3 blueteaming purpleteam
Language:Python 111
cr0nx / awesome-linux-attack-forensics-purplelabs
This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools.
attack-defense blueteam detection dfir injection linux purplelabs purpleteam redteam rootkit
108
jwillyamz / ezEmu
See adversary, do adversary: Simple execution of commands for defensive tuning/research (now with more ELF on the shelf)
purpleteam adversary-emulation security-testing linux-security mitre-attack
Language:C# 102
NIST-to-Tech
mikeprivette / NIST-to-Tech
An open-source listing of cybersecurity technology mapped to the NIST Cybersecurity Framework (CSF)
nist-cybersecurity-framework cybersecurity nist nist-csf blueteam redteam purpleteam cyber-security cyber-security-team nist800-53 pentesting pentesting-tools pentest infosec infosec-approved infosec-reference netsec netsec-tools netsecurity vulnerability
102
ziesemer / ad-privileged-audit
Provides various Windows Server Active Directory (AD) security-focused reports.
security security-audit security-auditing-tool active-directory powershell security-hardening system-hardening cybersecurity forensics auditing security-tools blueteam reporting-tool information-gathering account-management dfir purpleteam risk-assessment
Language:PowerShell 81
netsecurity-as / recon365
Gather information from an email address connected to Office 365
active-directory blueteam cybersecurity o365-security osint purpleteam recon redteam
Language:Python 78
Sam0x90 / CTI
Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
adversary-emulation adversary-simulation cti purpleteam threat-intelligence
Language:PowerShell 75
MrM8BRH / CRLJ
The repository is a valuable resource for individuals looking to enhance their knowledge and skills in cybersecurity. It provides in-depth materials and guides for various cybersecurity domains.
blueteam cybersecurity cybersecurity-education cybersecurity-resources ddos hacking mrm8brh osint penetration-testing purpleteam redteam roadmap soc-analyst
64
github-watchman
PaperMtn / github-watchman
Monitoring GitHub for sensitive data shared publicly
blueteam blue-team cybersecurity infosec github tools redteam red-team purpleteam purple-team github-api monitoring dlp data-loss-prevention
Language:Python 64
adversarial-threat-modelling
ssnkhan / adversarial-threat-modelling
Supporting material for my presentation "Adversarial Threat Modelling — A Practical Approach to Purple Teaming in the Enterprise"
threat-intelligence mitre-attack purpleteam adversary-emulation adversary-simulation cti redteam blueteam
Language:Shell 49

purpleteam

LOLBAS-Project / LOLBAS

LasCC / HackTools

api0cradle / UltimateAppLockerByPassList

api0cradle / LOLBAS

ahmedkhlief / APT-Hunter

cyb3rxp / awesome-soc

PlumHound / PlumHound

FalconForceTeam / FalconFriday

ch33r10 / EnterprisePurpleTeaming

bluecapesecurity / PWF

scythe-io / purple-team-exercise-framework

iknowjason / PurpleCloud

idnahacks / GoodHound

PaperMtn / slack-watchman

DefensiveOrigins / AtomicPurpleTeam

Ziconius / FudgeC2

Viralmaniar / Remote-Desktop-Caching-

mthcht / awesome-lists

AnLoMinus / Diablo

PaperMtn / gitlab-watchman

blackbotsecurity / Atomic-Red-Team-Intelligence-C2

DefensiveOrigins / APT-Lab-Terraform

TH3xACE / EDR-Test

mthcht / Purpleteam

iknowjason / BlueCloud

purpleteam-labs / purpleteam

Viralmaniar / MurMurHash

cr0nx / awesome-linux-attack-forensics-purplelabs

jwillyamz / ezEmu

mikeprivette / NIST-to-Tech

ziesemer / ad-privileged-audit

netsecurity-as / recon365

Sam0x90 / CTI

MrM8BRH / CRLJ

PaperMtn / github-watchman

ssnkhan / adversarial-threat-modelling