jonz-secops Goto Github PK

security_monkey

Security Monkey monitors AWS, GCP, OpenStack, and GitHub orgs for assets and their changes over time.

sentinelone-queries

Repository of SentinelOne Deep Visibility queries.

sharpcompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

shellshocker

Tests for the ShellShock vulnerability

sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

shhmon

Neutering Sysmon via driver unload

sigma-detection-rules

Set of SIGMA rules (>250) mapped to MITRE Att@k tactic and techniques

signature-base

Signature base for my scanner tools

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

simuland

Understand adversary tradecraft and improve detection strategies

slack-watchman

Monitoring your Slack workspaces for sensitive information

soc-threat-hunting

Repo of python/bash scripts for identifying IoC's in threat feed and other online tools

somestuff

Some PowerShell Stuff

sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

splunk-connect-for-syslog

Splunk Connect for Syslog

splunk-createkvstore

Python Script to create a Splunk KV Store collection via the REST API

splunk-esintel-kvstore

Splunk csv to KVStore ES Threat Intel

splunk-ransomware-dashboard

splunkarchitect

splunkbase-download

Shell script to download apps from Splunkbase

splunkconf19_sessioninfo

Full session information guide for Splunk .conf 2019

sshession

The SSH Multiplex Backdoor Tool

sslproxy

Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection

stethoscope-app

A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud.

stuffz

Basically a script thrift shop

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

swiftfilter

Exchange Transport rules to detect and enable response to phishing

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

syslog-generator

Generate syslog messages to test logging solutions.