Azure-Sentinel
azure/azure-sentinelCloud-native SIEM for intelligent security analytics for your entire enterprise.
cloud-securitycurated-resourcesdefensive-tools+5
6.1k
azure/azure-sentinelCloud-native SIEM for intelligent security analytics for your entire enterprise.
lolbas-project/lolbasLiving Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
a-poc/blueteam-toolsTools and Techniques for Blue Team / Incident Response
infosecn1nja/ad-attack-defenseAttack and defend active directory using modern post exploitation adversary tradecraft activity
ihebski/defaultcreds-cheat-sheetOne place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
laylavish/ublockorigin-huge-ai-blocklistA huge blocklist of manually curated sites that contain AI generated imagery for uBlock Origin & uBlacklist.
phishdestroy/destroylistReal-time phishing & scam domain blocklist - 208k+ curated threats, 1M+ community, free API, multiple formats
tsale/edr-telemetryThis project aims to compare and evaluate the telemetry of various EDR products.
reprise99/sentinel-queriesCurated collection of Microsoft Sentinel KQL queries and tutorials for hunting threats, analyzing Azure AD sign-in logs, detecting anomalies, and…
center-for-threat-informed-defense/adversary_emulation_libraryAn open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
tkmru/awesome-edr-bypassCurated collection of EDR bypass resources including PoCs, tools, workshops, presentations, and blogs for ethical hacking and red team operations.
michenriksen/drawio-threatmodelingDraw.io libraries for threat modeling diagrams
an0nud4y/av-edr-lab-environment-setupAV/EDR Lab environment setup references to help in Malware development
the-dfir-report/sigma-rulesRules generated from our investigations.
jonny-jhnson/msrpc-to-attackA repository that maps commonly used attacks using MSRPC protocols to ATT&CK
pandare9x/yara-rulesRepository of Yara Rules