ben12385 Goto Github PK

act-platform

Open platform for collection and exchange of threat intelligence information

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

ansible

Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

caldera

Scalable Automated Adversary Emulation Platform

ce4057-micirumrewrite

client-python

OpenCTI Python client

community.vmware

Ansible Collection for VMWare

connectors

OpenCTI connectors

datasets

OpenCTI datasets

decept

Decept Network Protocol Proxy

detectionusingbinvis

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

docker

OpenCTI Docker deployment helpers

dotnetfile

ds4400-hw1

HW1

ds4400-hw2

ds4400-hw3

ds4400-malwareclassification

ezlinkemulation

ghidra

Ghidra is a software reverse engineering (SRE) framework

hackspacecon_malware_analysis_course

Free training course offered at Hack Space Con 2023

karton-unpacker

A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.

kedei6.3displayprogram

Kedei6.3 3.5Inch Screen

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

misp-training

MISP trainings, threat intel and information sharing training materials with source code

mutiny-fuzzer