vector-sec Goto Github PK

ace

Automated, Collection, and Enrichment Platform

alerting-detection-strategy-framework

A framework for developing alerting and detection strategies for incident response.

apollo

Apple Pattern of Life Lazy Output'er

applicationwhitelistbypasstechniques

A Catalog of Application Whitelisting Bypass Techniques

assimilator

Automatic firewall rule orchestator.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

aws-visualizer

Visualizing an AWS region

bitb

Browser In The Browser (BITB) Templates

bloodhound

Six Degrees of Domain Admin

cb-response-smb1-utility

A simple utility to check the status of and/or disable SMBv1 on Windows system via Cb Response's Live Response functionality.

cb-response-surveyor

A simple survey tool for Cb Response

cbapi-python

Carbon Black API - Python language bindings

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

content

Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!

credking

Password spraying using AWS Lambda for IP rotation

cve-2022-22963

CVE-2022-22963 PoC

defcon25_ps_workshop

Materials of Workshop presented at DEFCON 25

demisto-sdk

derbycon2016

Code Samples and Slides From DerbyCon 2016

detections

A home for detection content developed by the delivr.to team

deviceguardbypassmitigationrules

A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses

dumpsterfire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

duo_powershell

duopusher

Duo MFA auditing tool to test users' likelihood of approving unexpected push notifications

empire

Empire is a PowerShell and Python post-exploitation agent.

empyre

A post-exploitation OS X/Linux agent written in Python 2.7

file-smuggling

HTML smuggling is not an evil, it can be useful

findfrontabledomains

Search for potential frontable domains

fir

Fast Incident Response