rafael-sm17 Goto Github PK

api_vicarius

Open Source Reports for API tasks, Vicarius

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

caldera

Scalable Automated Adversary Emulation Platform

chainsaw

Rapidly Search and Hunt through Windows Event Logs

detection-rules

Rules for Elastic Security's detection engine

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

grab_beacon_config

hunter

A threat hunting / data analysis environment based on Python, Pandas, PySpark and Jupyter Notebook.

ioc-s

iocs

Sophos-originated indicators-of-compromise from published reports

kestrel-analytics

Kestrel Analytics

kestrel-lang

Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.

malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

osquery-workshop

OSQuery threat hunting workshop BSides London 2019.

rta

sophos-central-api-connector

Leverage Sophos Central API

threathunting

An informational repo about hunting for adversaries in your IT environment.

veris

Vocabulary for Event Recording and Incident Sharing (VERIS)

vickreportapicsv

zoidbergstrike

A "hooray I am useful" Cobalt Strike Team Server scanner