
DetectionLabELK
DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

A Simple Ransomware Vaccine

Blue Team detection lab created with Terraform and Ansible in Azure.

Network anomaly detector that monitors raw packets to identify port scanning activity in real time, with flexible sniffing duration controls and live…

TheLightScope

LLMNR/NBNS/mDNS Spoofing Detection Toolkit

USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is executed, a…

First public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. YARA + Sigma +…

High fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…