karmanyat28/multi-stage-exploitation-and-detection-engineering-analysis-of-cve-2023-34362-in-moveit-transferThis repository contains an academic and technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting the MOVEit Transfer…
the-dfir-report/sigma-rulesRules generated from our investigations.
op7ic/blueteam.labBlue Team detection lab created with Terraform and Ansible in Azure.
safelineman/agentic-soc-simulationAI 驱动的 SOC 仿真平台
cyberark/skywrapperSkyWrapper helps to discover suspicious creation forms and uses of temporary tokens in AWS
osbornepro/btps-secpackPowerShell-based security toolkit for small-to-medium enterprises, providing automated alerts, Active Directory hardening, Windows Event Forwarding,…
goatmilkkk/tinyprocessorA post-processing script for TinyTracer
ny1024/clawguardModular security toolkit for autonomous agents providing static analysis, configuration auditing, runtime monitoring, and supply chain verification…
lucadibello/network-attack-detectionAdvanced detection of port scanning, DoS and malware attacks using Machine Learning techniques
umidguluzada/cyberdefense-labA complete Blue Team Cybersecurity Lab featuring pfSense, Suricata, and ELK Stack for network monitoring and threat detection.
joertx07/printnightmare-detection-labSplunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…
chrisandoryan/nethive-projectRestructured and Collaborated SIEM and CVSS Infrastructure. Presented at Blackhat Asia Arsenal 2020.
nccgroup/reactorRuns custom filters on Elasticsearch and alerts on matches
lightless-labs/third-thoughtsResearch toolkit for analyzing AI agent behavioral patterns through multi-disciplinary corpus analysis. Parses session logs, runs 23 analytical…
