h0ffayyy Goto Github PK

apt-ecosystem

This repository contains the website and the tools which are part of the joint research between Check Point Research and Intezer to map the connections inside the APT Ecosystem of Russia.

awesome-soar

A curated Cyber "Security Orchestration, Automation and Response (SOAR)" awesome list.

azure-sentinel

Cloud-native SIEM for intelligent security analytics for your entire enterprise.

certsee

Query crt.sh and find associated infrastructure in Shodan based on certificate serial numbers

csvtoconfmd

Fork of csvtomd - modified to convert CSV files to Confluence Wiki table

ctf

Various CTF Write-Ups

cve-2019-15043

POC scanner for the Grafana vulnerability CVE-2019-15043

devops-stuff

docusignmonitor-microsoftsentinel

go-stuff

ioc-test

jenkinspot

A python-based Jenkins Honeypot

jira-cve-2019-8451

POC to check for Jira instances vulnerable to CVE-2019-8451

mhn

Modern Honey Network

microsoft-copilotforsecurity-content

microsoftsentinel-documentanalyticsrules

A python script to help automate Microsoft Sentinel analytics rule documentation

microsoftsentinel-greathorn

microsoftsentinelreporter

microsoftsentinelstuff

Misc. content for Microsoft Sentinel

okbrute

Script to test credentials against an Okta sign-in widget.

olliebot

Ollie your personal Azure Sentinel assistent

openvasreporting

OpenVAS Reporting: Convert OpenVAS XML report files to reports

school

Undergrad School Projects

scripts

Misc. scripts I've created

sentinel-dettect

Create a DeTT&CT techniques administration file from exported Microsoft Sentinel rules

sentinel-queries

Collection of KQL queries

sentinel-to-yaml

Convert Microsoft Sentinel rule templates to YAML

sentineldomainmonitor

Use dnstwist to monitor for lookalike domains and send logs to Azure Log Analytics

tap

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

terraform-stuff

Random collection of Terraform configs/modules/etc.