dfirence Goto Github PK

ac3-threat-sightings

A threat sighting collects the behavior of a real threats and the observables used during its engagement.

aikido_wiper

aod-public

Community Outreach Resource For AOD

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

content-library-cim2

Clone from EXABEAM

crypto_public

Reference implementations of AES & SHA cryptographic functions in JavaScript

data

detection-hackathon-apt29

Place for resources used during the Mordor Detection hackathon event featuring APT29 ATT&CK evals datasets

docusaurus-sample

drone-demo

MOCK View Testing

exe-rs

The PE Executable Library, but for Rust!

expertinvestigationguides

Expert Investigation Guides

expertrules

This repository contains a set of rules samples that can be directly used with McAfee Endpoint Security, in the Exploit Prevention policy.

flavortown

Various ways to execute shellcode

flutter-desktop-app

forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

gdsa-530

For Anyone Interested In Helping Eachother as part of the GDSA SEC530

ghauto

Testing JS Rest Api Octokit

gui-inspect-tool

Gui Inspect tool for Windows

hello-world

Angular GHP

hunting-queries-detection-rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

hypervisor-101-in-rust

The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

json-rule-editor-cloned

Json rule editor

lazarus-group-synthesis

Research On Adversary Group

linux-ebpf-experiments

A Rust-Centric exploration of BPF

ma-datasets-public

Public Datasamples used in MA

ma-insights-xe

User Feedback Space of #MitreAssistant

ma-privs

Data Sample from PA Privs