mhaggis Goto Github PK

amsi-tracer

Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution.

app_splunk_sysmon_hunter

Splunk App to assist Sysmon Threat Hunting

applockergen

AppLocker Policy Generator

asrgen

ASR Configurator, Essentials and Atomic Testing

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

atomiclua

A combination of OffensiveLua and Learning Lua - By Defenders, for Defenders

atomictestharnesses

Public Repo for Atomic Test Harness

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

attack_range_local

Build a attack range in your local machine

blacklotus

BlackLotus UEFI Windows Bootkit

bookish-happiness

OG Atomic Red Team

cb-response-splunk-app

Cb Response - Splunk Integration

cbr-process-geoip

Finding anomalies for specific processes based on their GeoIP connections

cbr-queries

Collection of useful, up to date, Carbon Black Response Queries

cbrcli

Command line interface to Carbon Black Response

cbresponse-splunk-hunting

Analyzing Carbon Black Response endpoint telemetry in Splunk

coinhive-block

To block the malware domains of coin-hive.

docker_cbapi

drvloader

A post exploitation utility for loading signed kernel drivers using both the undocumented NtLoadDriver function and by directly interfacing with the Windows Service Control Manager (SCM)

gdrv-loader

Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

grab_beacon_config

hackerart

A collection of art inspired by the world of cybersecurity and hacking culture.

hunt-detect-prevent

Lists of sources and utilities utilized to hunt, detect and prevent evildoers.

hvci-loldrivers-check

installerfiletakeover

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-printdemon

llm

LLM tools and toys

mhaggis

mockbin

Mock, Test & Track HTTP Requests and Response for Microservices