bobby-tablez Goto Github PK

adaway-parsed

This repo is updated to include a clean list of advertising domains from AdAway found here: https://adaway.org/hosts.txt

batch-vba-macro-extractor

bobby-tablez

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

enable-all-the-logs

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

ethanol-gasoline-octane-calculator

A PowerShell script which calculates the octane rating of an ethanol/gasoline mixture based on percentage of ethanol, and octane rating of gasoline (ie 91 or 93)

fake_systeminfo

Generate a fake "systeminfo.exe" binary in order to hide the presence of a VM

format-string-deobfuscator

Deobfuscates PowerShell format strings

ft-sysmon-config

Sysmon configuration based on Swift on Security

heuristic-confuser

Sandbox/Heuristic PowerShell Bypass

hijacklibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

invoke-mathfuscation

A quick command line utility that generates uses simple addition to obfuscate individual characters, then executes it

invoke-xorfuscation

Generate obfuscated PowerShell commands using XOR logic with random keys!

ip-obfuscator

Hide an IP address in scripts using hex/decimal/octal conversions

loobins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

process-suspender

A quick PowerShell utility which launches and immediately suspends a provided process for a specified amount of time.

py-batch-fuscator

A Python script which simply obfuscates batch scripts by messing with the encoding.

scripts

sigma

Main Rule Repository

sigma-rules

Contains sigma rules based on current threat research

vbscrambler

A Python VBScript Code Obfuscator

windows-sandbox-flare-vm

This config file will automatically convert a temporary Windows Sandbox environment into a Flare VM for malware analysis.

yara-rules

Yara-Rules