pared
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.
authentication-authorizationdefensive-toolsnetwork-security+2
Tools for blue team, defensive security, and threat protection.
renich/paredLightweight, secure control plane & real-time web dashboard in Crystal for Linux firewalld and NetworkManager host security.
harendra-shakya/smart-contract-attack-vectorsA curated list of smart contract attack vectors
joesecurity/sigma-rulesSigma rules from Joe Security
embee-research/sigmaA repository to release detection rules to the public
inquest/yara-rules-vtCollection of YARA rules designed for usage through VirusTotal.com.
pe3zx/crowdstrike-falcon-queriesA collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
cisagov/untitledgoosetoolUntitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…
ropfuscator/ropfuscatorROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
dr4k0nia/yara-rulesA collection of my yara rules
t3l3m3try/threat_huntingSome Threat Hunting queries useful for blue teamers
connectedlucy/plagueDefault Detections for EDR
mthcht/purpleteamPurpleteam scripts simulation & Detection - trigger events for SOC detections
d4rksystem/vmwarecloakA PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.
center-for-threat-informed-defense/adversary_emulation_libraryAn open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
theflink/hunt-weird-syscallsETW based POC to identify direct and indirect syscalls
quahac/azure-ad-password-checkerAzure AD Password Checker