1r-f0rhun73r Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

allthingstimesketch

This repository contains helper scripts and custom configs to get the best out of Google's Timesketch project.

ansible-playbooks

Playbooks for automating server procedures based on our Community guides

apt-hunter

attack-tools

Utilities for MITRE™ ATT&CK

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

aws-automated-incident-response-and-forensics

bluecloud

Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D. Azure and AWS terraform support.

cloud-forensics-utils

Python library to carry out DFIR analysis on the Cloud

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

dfrws-2019-kape-workshop

Slides, scripts, notes, link, etc from my 2019 DFRWS KAPE Workshop

ds4n6_lib

Library of functions to apply Data Science in several forensics artifacts

elastic-container

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

enterprisepurpleteaming

Purple Team Resources for Enterprise Purple Teaming: An Exploratory Qualitative Study by Xena Olsen.

etw-providers-docs

Document ETW providers

eventlogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

forensic-bloom-filters

This repository holds bloom filters that can be generated from various sources like NIST, MISP, etc. for quick lookups of hash sums

forseti-security

Forseti Security

garble

Obfuscate Go builds

humblebundle-downloader

Download you Humble Bundle Library

ilo-rest-api-docs

Beautiful static documentation for your API

invoke-adversary

Simulating Adversary Operations

jarm

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

kansa

A Powershell incident response framework

kql-for-dfir

A guide to using Azure Data Explorer and KQL for DFIR

labs

This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.