mrezqi Goto Github PK

aimod2

Adversarial Interception Mission Oriented Discovery and Disruption Framework, or AIMOD2, is a structured threat hunting approach to proactively identify, engage and prevent cyber threats denying or mitigating potential damage to the organization.

android-overlay-malware-example

Harmless Android malware using the overlay technique to steal user credentials.

android-upload-service

Easily upload files (FTP / Multipart / Binary) in the background with progress indication notification

bitsparser

bloodhound

Six Degrees of Domain Admin

cape

Malware Configuration And Payload Extraction

cobaltstrikeconfigparser

C# Library for Parsing CobaltStrike beacon configurations from process memory or files

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

cve-2019-19781

DFIR notes for Citrix ADC (NetScaler) appliances vulnerable to CVE-2019-19781

cve-2021-1675_carbonblack_huntingquery

dir2json

Tool for efficient directory enumeration

dissect

This project is a meta package, it will install all other Dissect modules with the right combination of versions.

dnspy

.NET debugger and assembly editor

dumpert

LSASS memory dumper using direct system calls and API unhooking.

editoritemtemplates

Item templates for editor extensions for Visual Studio 2010.

evtx-attack-samples

Windows Events Attack Samples

flask-registration

gated-resources

git-crypt-test

hunting-queries-detection-rules

Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

imagetagger

An open source online platform for collaborative image labeling

irm

Incident Response Methodologies

jarm

json

A free, in-browser JSON to CSV converter.

json_to_csv

kansa

A Powershell incident response framework

kestrel-huntbook

This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)

legacy-sigmatools

Legacy Sigma Tools (sigmac etc.)

linuxcatscale

Incident Response collection and processing scripts with automated reporting scripts

locksmith

A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services