0xatef

0xatef.github.io

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-honeypots

an awesome list of honeypot resources

blue-team-notes

You didn't think I'd go and leave the blue team out, right?

bluespawn

An Active Defense and EDR software to empower Blue Teams

c2-server

A basic c2 / agent.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cyberthreathunting

A collection of resources for Threat Hunters - Sponsored by Falcon Guard

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

hunter_diary

My own diary notes. Adding the commands, tools, techniques, and resources that I will not memorize.

hunting-new-registered-domains

Hunting Newly Registered Domains

impacket

Impacket is a collection of Python classes for working with network protocols.

list-infosec-encyclopedia

A list of information security related awesome lists and other resources.

malware-iocs

phishing_catcher

Phishing catcher using Certstream

protections-artifacts

Elastic Security detection content for Endpoint

python-auto-clicker

python auto clicker

qrce-rules

These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.

redelk

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

sigma

Main Rule Repository

sigma-detection-rules

Set of SIGMA rules (>320) mapped to MITRE Att@k tactic and techniques

sigma-rules

Rules generated from our investigations.

sigma-rules-1

Sigma rules from Joe Security

sigma-specification

Sigma rule specification

sysmon-config

Sysmon configuration file template with default high-quality event tracing

thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

windows_event_logging

Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.