carmelofdz Goto Github PK

followers: 2.0 following: 19.0 repos: 64.0 gists: 0.0

Type: User

carmelofdz's Projects

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

active_directory_advanced_threat_hunting

This repo is about Active Directory Advanced Threat Hunting

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

audit-userspace

Linux audit userspace repository

auditd

Best Practice Auditd Configuration

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

azure-red-team

Azure Security Resources and Notes

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

blue-teaming-with-kql

Repository with Sample KQL Query examples for Threat Hunting

capa

The FLARE team's open-source tool to identify capabilities in executable files.

chainsaw

Rapidly Search and Hunt through Windows Event Logs

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

ctf

knowledge is power

detection-and-response-pipeline

✨ A compilation of suggested tools/services for each component in a detection and response pipeline, along with real-world examples. The purpose is to create a reference hub for designing effective threat detection and response pipelines. 👷 🏗

digital-forensics-lab

Free hands-on digital forensics labs for students and faculty

dive

A tool for exploring each layer in a docker image

forensicminer

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.

goad

game of active directory

gsvsoc_cirt-playbook-battle-cards

Cyber Incident Response Team Playbook Battle Cards

hunter

A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.

hunting-queries-detection-rules

KQL Queries. Microsoft 365 Defender, Microsoft Sentinel

incident-playbook

GOAL: Incident Response Playbooks Mapped to MITRE Attack Tactics and Techniques. [Contributors Friendly]

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

inventory-browserexts

Script to inventory Firefox and Chrome extensions

invoke-kape

Remote KAPE collection using powershell

kapestrike

Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike

kql

Threat Hunting query in Microsoft 365 Defender, XDR. Provide out-of-the-box KQL hunting queries - App, Email, Identity and Endpoint.

carmelofdz Goto Github PK

carmelofdz's Projects

Recommend Projects

Recommend Topics

Recommend Org