cbresponse Goto Github PK

adversaryemulation

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

atomicpurpleteam

Atomic Purple Team Framework and Lifecycle

attack-python-client

Python Script to access ATT&CK content available in STIX via a public TAXII server

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-cobaltstrike-defence

Defences against Cobalt Strike

awesome-yara

A curated list of awesome YARA rules, tools, and people.

awesomwekql

azurermscripts

Handy scripts to perform analysis on Azure Resources via AzureRM

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

c2-jarm

A list of JARM hashes for different ssl implementations used by some C2/red team tools.

cb-threat-hunting

cbr-queries

Collection of useful, up to date, Carbon Black Response Queries

cisa_stix_ips

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

cobaltstrikeforensic

Toolset for research malware and Cobalt Strike beacons

commentator

community-threats

The GitHub of Adversary Emulation Plans in JSON. Share SCYTHE threats with the community. #ThreatThursday adversary emulation plans are shared here.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

detections

Threat intelligence and threat detection indicators (IOC, IOA)

dllsforhackers

Dll that can be used for side loading and other attack vector.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

falconfriday

Bi-weekly hunting queries

generate-macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

hacking

Hacking files and scripts

hacks

A collection of hacks and one-off scripts.

halogen

Automatically create YARA rules from malicious documents.

hello-world

hello world! c!

invoke-wmilm