BlueTeam.Lab
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
defensive-toolsconfiguration-auditingdigital-forensics+7
1871 year ago
Tools for blue team, defensive security, and threat protection.
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
redcanaryco/chain-reactorGenerate Linux executables that simulate adversary behaviors and techniques for testing detection and response coverage. Consumes JSON for easy…
securitybrewery/catalystSelf-hosted incident response platform with ticket management, automated reaction playbooks, task tracking, and dashboards for streamlining alert…
idnahacks/goodhoundUses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.
cerbersec/aresProject Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique
hacklcx/hfishEnterprise-grade honeypot system for detecting internal network breaches, external threats, and producing threat intelligence with 90+ service…
wecooperate/imonitorsdkThe world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能，…
fourcorelabs/edrhuntScan installed EDRs and AVs on Windows
globaleaks/globaleaks-whistleblowing-softwareGlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
p0cl4bs/nanobrokWeb Service write in Python for control and protect your android device remotely.
cyberdefenders/detectionlabelkDetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.
d35ha/callobfuscatorObfuscate specific windows apis with different apis
ghostpack/seatbeltSeatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security…
matterpreter/defendercheckIdentifies the bytes that Microsoft Defender flags on.
s3cur3th1ssh1t/amsi-bypass-powershellThis repo contains some Amsi Bypass methods i found on different Blog Posts.
cyberark/evasorA tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies