
DShield-SIEM
DShield Sensor Log Collection with ELK

DShield Sensor Log Collection with ELK

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

Recognizing the most likely APT groups responsible for an incident

Enumerate various traits from Windows processes as an aid to threat hunting

Mapping Corelight or Zeek data to Elastic Common Schema logs

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a…

Python Decoders for Common Remote Access Trojans

Botnet command & control monitor

Script to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.



A registry-based workaround can be used to help protect an affected Windows server, and it can be implemented without requiring an administrator to…

general purpose workaround for the log4j CVE-2021-44228 vulnerability

This powershell script is intended to be used by anyone looking to remediate the Log4j Vulnerability within their environment. It can target multiple…