xg5-simon Goto Github PK

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

cb-content

cb-content is a collection of content packs for Carbon Black Cloud.

cb-runner

cb-runner is an experimental Python program to run automated actions via Carbon Black Live Response. The actions are stored in a simple CSV format and can be applied to a single device or list of devices.

cloudshellaadapps

cortex-analyzers

Cortex Analyzers Repository

crowdstrike2th

A Python program to connect to the CrowdStrike QueryAPI, retrieve the latest detections and create an alert in TheHive Project

crt

Contact: [email protected]

dockerfiles

Dockerfiles for blue team tools

hawk

Powershell Based tool for gathering information related to O365 intrusions and potential Breaches

jupyter-widget-stixview

STIX2 graph widget for Jupyter notebooks, powered by stixview library

mandiant-azure-ad-investigator

misp-cti-blueprint

Sample cti-blueprints as MISP reports

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

ms-graph-blueteam

MS Graph Commands and Tools for Blue Teamers

oh-my-posh-themes

oh-my-posh themes

pbrunner

powershell

Powershell fun

powershell-tools

Experimental powershell snippits.

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

sentinel-queries

Collection of KQL queries

sigma

Generic Signature Format for SIEM Systems

threat-hunting

threathuntingjupyternotebooks