ecapuano Goto Github PK

analyzemft

ansible-honeypots

ares

Python botnet and backdoor

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

brawl-public-game-001

Data from a BRAWL Automated Adversary Emulation Exercise

caldera

The CALDERA automated adversary emulation system

cortex-analyzers

Cortex Analyzers Repository

cowrie

Cowrie SSH/Telnet Honeypot

defoe

Website defacement detection system based on machine learning

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dionaea

Home of the dionaea honeypot

dumpsterfire

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

glastopf

Web Application Honeypot

graylog_sysmon

Advanced Threat detection Configurations for Graylog

gsuite-login-geoip

A script to analyze geographic GSuite Login activity

hayabusa

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.

honeymap

Real-time websocket stream of GPS events on a fancy SVG world map

honeypot-camera

observation camera honeypot

hubot-grafana

Query Grafana dashboards.

iris-web

Incident Response collaborative platform

kapefiles

This repository serves as a place for community created Targets and Modules for use with KAPE. There is also documentation available in Markdown format

logstash-configs

Contains log parsers for Logstash for many systems and applications. Also contains many methods of augmenting logs.

misp

MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)

password_cracking_rules

One rule to crack all passwords. or atleast we hope so.

phishreporter-outlook-add-in

PhishReporter Outlook Add-In in an Outlook Add-In that allows users to report phishing e-mails to a specific e-mail address for further processing/investigation. Fork of https://github.com/MSAdministrator/PhishReporter-Outlook-Add-In

picoctf-platform-2

A genericized version of picoCTF 2014 that can be easily adapted to host CTF or programming competitions.

pnaf

Passive Network Audit Framework

rdpy

Remote Desktop Protocol in Twisted Python

ritaa

Rudimentary Intelligence and Threat Analysis Application

selks

A Suricata based IDS/IPS distro