svch0stz Goto Github PK

abused-legitimate-services

Cloud, CDN, and marketing services leveraged by cybercriminals and APT groups

allthingstimesketch

azure

Azure AD Scripts

beta

Beta versions of my software

cobaltstrikeparser

commons

A Collection of Python Utilities and Libraries I have developed to achieve common tasks which I use.

cve-2022-22947

poc for CVE-2022-22947

detection

Detection in the form of Yara, Snort and ClamAV signatures.

detectraptor

A repository to share publicly available Velociraptor detection content

go-recyclebin

Go parser for $I files in $Recycle.bin

grab_beacon_config

grafiki

Threat Hunting tool about Sysmon and graphs

helk

The Hunting ELK

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE.

lateral_movement_graph

microsoft-analyzer-suite

A collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID

mordor

Re-play Adversarial Techniques

plaso_filters

Scripts to facilitate filtering with Plaso

recmd

Command line access to the Registry

sigma

Generic Signature Format for SIEM Systems

signature-base

Signature base for my scanner tools

sqlitehunter

Hunt for SQLite files used by various applications

sysmon-config

Sysmon configuration file template with default high-quality event tracing

thethreathuntlibrary

Library of threat hunts to get any user started!

threatingestor

Extract and aggregate threat intelligence.

unbup

Powershell script to process McAfee Quarantine .bup files.

velociraptor

Digging Deeper....

velociraptor-detections

velociraptor-docs

Documentation site for Velociraptor

velociraptor-to-timesketch